CVE-2008-0149

TUTOS 1.3 allows remote attackers to read system information via a direct request to php/admin/phpinfo.php, which calls the phpinfo function...

CVE-2008-0149

TUTOS 1.3 allows remote attackers to read system information via a direct request to php/admin/phpinfo.php, which calls the phpinfo function...

CVE-2008-0149

Affected software: TUTOS 1.3. The CVE-2008-0149 entry describes a remote information disclosure vulnerability where an attacker can read system information by directly requesting php/admin/phpinfo.php, which invokes phpinfo(). The issue is categorized as a PHP information-disclosure via HTTP. Con...

CVE-2007-6606

CVE-2007-6606 affects OpenBiblio 0.5.2-pre4 and earlier: remote attackers can disclose configuration information via a direct request to phpinfo.php, which uses phpinfo(). The entry notes a MEDIUM severity (CVSSv2 base score 5.0) with network attack vector and no authentication. The provided docu...

CVE-2007-6606: Exposure of Sensitive Information to an Unauthorized Actor

OpenBiblio 0.5.2-pre4 and earlier allows remote attackers to obtain configuration information via a direct request to phpinfo.php, which calls the phpinfo function...

CVE-2007-6476: Exposure of Sensitive Information to an Unauthorized Actor

GF-3XPLORER 2.4 allows remote attackers to obtain configuration information via a direct request to explorer/phpinfo.php, which calls the phpinfo function...

CVE-2007-6221

TuMusika Evolution 1.7R5 allows remote attackers to obtain configuration information via a direct request to phpinfo.php, which calls the phpinfo function. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2007-6221: Exposure of Sensitive Information to an Unauthorized Actor

TuMusika Evolution 1.7R5 allows remote attackers to obtain configuration information via a direct request to phpinfo.php, which calls the phpinfo function. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Unfixed XSS vulnerability at www.uday.com.np

Security researcher Uber0n, has submitted on 11/12/2007 a cross-site-scripting XSS vulnerability affecting www.uday.com.np, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/12/2007. It is currently...

Unfixed XSS vulnerability at www.bf2-squads.com

Security researcher SeeD, has submitted on 11/12/2007 a cross-site-scripting XSS vulnerability affecting www.bf2-squads.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/12/2007. It is currently...

CVE-2002-2349

CVE-2002-2349 affects phpBBmod 1.3.3 where a call to phpinfo() can be triggered remotely to reveal sensitive environment information. The provided documents reiterate that phpinfo output exposes configuration and server variables, indicating a partial confidentiality impact. No explicit remediati...

CVE-2002-2349: Exposure of Sensitive Information to an Unauthorized Actor

phpinfo.php in phpBBmod 1.3.3 executes the phpinfo function, which allows remote attackers to obtain sensitive environment information...

CVE-2002-2247

The CVE-2002-2247 entry concerns Mambo Site Server 4.0.11 where the administrator/phpinfo.php script calls phpinfo(), enabling remote attackers to reveal sensitive information such as the full web root path. This is an information-disclosure flaw attributed to phpinfo() usage in that script. The ...

CVE-2002-2247: Undefined Security Weakness

The administrator/phpinfo.php script in Mambo Site Server 4.0.11 allows remote attackers to obtain sensitive information such as the full web root path via phpinfo.php, which calls the phpinfo function...

Unfixed XSS vulnerability at www.warnexus.net

Security researcher zuppergazi, has submitted on 09/03/2007 a cross-site-scripting XSS vulnerability affecting www.warnexus.net, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/03/2007. It is currentl...

Unfixed XSS vulnerability at www.netvoyager.ca

Security researcher zuppergazi, has submitted on 09/03/2007 a cross-site-scripting XSS vulnerability affecting www.netvoyager.ca, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/03/2007. It is current...

Unfixed XSS vulnerability at bahrainevents.com

Security researcher zuppergazi, has submitted on 08/03/2007 a cross-site-scripting XSS vulnerability affecting bahrainevents.com, which at the time of submission ranked 13495 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/03/2007. It is...

Unfixed XSS vulnerability at www.nobeo.fr

Security researcher zuppergazi, has submitted on 08/03/2007 a cross-site-scripting XSS vulnerability affecting www.nobeo.fr, which at the time of submission ranked 3219970 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/03/2007. It is...

Unfixed XSS vulnerability at www.maths.tcd.ie

Security researcher zuppergazi, has submitted on 08/03/2007 a cross-site-scripting XSS vulnerability affecting www.maths.tcd.ie, which at the time of submission ranked 24151 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/03/2007. It is...

Unfixed XSS vulnerability at www.wowcoldblood.com

Security researcher zuppergazi, has submitted on 08/03/2007 a cross-site-scripting XSS vulnerability affecting www.wowcoldblood.com, which at the time of submission ranked 6866981 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/03/2007. It i...