CVE-2004-1203 parser.php in phpCMS 1.2.1 and earlier, with non-stealth and debug modes enabled, allows remote attackers to gain sensitive information via an invalid file parameter, which reveals the web server's in...
MediumCVSS 5.0
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
parser.php in phpCMS 1.2.1 and earlier, with non-stealth and debug modes enabled, allows remote attackers to gain sensitive information via an invalid file parameter, which reveals the web server's installation path.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| phpcms | = 1.1.9 | No fix listed |
| phpcms | = 1.2.0 | No fix listed |
| phpcms | = 1.2.1 | No fix listed |
References
- 20041126 phpCMS <= 1.2.1 Xss Vulnerability, Information disclosure mailing-list
- 20041126 phpCMS <= 1.2.1 Xss Vulnerability, Information disclosure mailing-list
- phpcms-parser-xss(18272) vdb-entry
- phpcms-parser-path-disclosure(18279) vdb-entry