PT-2002-3061 · Phpbb · Phpbbmod

Publicado 2002-12-31 · Atualizado 2008-09-05 · CVE-2002-2349

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions phpBBmod version 1.3.3

Description The issue allows remote attackers to obtain sensitive environment information because the phpinfo.php in phpBBmod executes the phpinfo function.

Recommendations For phpBBmod version 1.3.3, consider removing or restricting access to the phpinfo.php file to prevent the disclosure of sensitive environment information.

Exploit

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2002-2349

Produtos afetados

Phpbbmod

Referências · 5

• 🔥 https://exploit-db.com/exploits/21931 · Exploit
• 🔥 http://securityfocus.com/bid/5942 · Exploit
• http://iss.net/security_center/static/10335.php · Nota
• http://securityfocus.com/archive/1/294701 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2002-2349 · Nota de Segurança