PT-2002-3061 · Phpbb · Phpbbmod

Published 2002-12-31 · Updated 2008-09-05 · CVE-2002-2349

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions phpBBmod version 1.3.3

Description The issue allows remote attackers to obtain sensitive environment information because the phpinfo.php in phpBBmod executes the phpinfo function.

Recommendations For phpBBmod version 1.3.3, consider removing or restricting access to the phpinfo.php file to prevent the disclosure of sensitive environment information.

Exploit

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2002-2349

Affected Products

Phpbbmod

References · 5

• 🔥 https://exploit-db.com/exploits/21931 · Exploit
• 🔥 http://securityfocus.com/bid/5942 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2002-2349 · Security Note
• http://iss.net/security_center/static/10335.php · Note
• http://securityfocus.com/archive/1/294701 · Note