CVE-2002-0249 in HTTP Serverinfo

Zusammenfassung

von MITRE

PHP for Windows, when installed on Apache 2.0.28 beta as a standalone CGI module, allows remote attackers to obtain the physical path of the php.exe via a request with malformed arguments such as /123, which leaks the pathname in the error message.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Veröffentlichung

29.05.2002

Moderieren

akzeptiert

Eintrag

VDB-18173

CPE

bereit

EPSS

0.07558

KEV

nein

Aktivitäten

very low

Quellen

Interested in the pricing of exploits?

See the underground prices here!