CVE-2002-2247

The CVE-2002-2247 entry concerns Mambo Site Server 4.0.11 where the administrator/phpinfo.php script calls phpinfo(), enabling remote attackers to reveal sensitive information such as the full web root path. This is an information-disclosure flaw attributed to phpinfo() usage in that script. The ...