CVE-2002-1725 phpimageview.php in PHPImageView 1.0 allows remote attackers to obtain sensitive information via the pw=show option, which invokes the phpinfo function.
MediumCVSS 5.0
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
phpimageview.php in PHPImageView 1.0 allows remote attackers to obtain sensitive information via the pw=show option, which invokes the phpinfo function.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| onlinetools.org phpimageview | = 1.0 | No fix listed |
References
- 20020504 Security holes : PHP Image View, NewsPro, Photo DB, As_web, GuestBook mailing-list
- www.ifrance.com vendor-advisory
- 4668 vdb-entry
- phpimageview-phpinfo-gain-info(9001) vdb-entry