The administrator/phpinfo.php script in Mambo Site Server 4.0.11 allows remote attackers to obtain sensitive information such as the full web root path via phpinfo.php, which calls the phpinfo function.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Mambo_site_server | Mambo | 4.0.11 (including) | 4.0.11 (including) |
References
- http://archives.neohapsis.com/archives/bugtraq/2002-12/0111.html
- http://www.securityfocus.com/bid/6376
- https://exchange.xforce.ibmcloud.com/vulnerabilities/10853
- http://archives.neohapsis.com/archives/bugtraq/2002-12/0111.html
- http://www.securityfocus.com/bid/6376
- https://exchange.xforce.ibmcloud.com/vulnerabilities/10853