CVE-2004-1203

The CVE concerns phpCMS prior to 1.2.1. When non-stealth and debug modes are enabled, parsing in parser.php allows remote attackers to obtain the web server’s installation path by supplying an invalid file parameter, causing information disclosure. Affected software: phpCMS 1.2.1 and earlier. Roo...