Skip to content

CVE-2008-0149 TUTOS 1.3 allows remote attackers to read system information via a direct request to php/admin/phpinfo.php, which calls the phpinfo function.

MediumCVSS 5.0 EPSS 7.5% Public exploit
Published
Updated
Exploit status
Public exploit available

Description

TUTOS 1.3 allows remote attackers to read system information via a direct request to php/admin/phpinfo.php, which calls the phpinfo function.

Affected products

ProductAffected versionsFixed in
tutos = 1.3 No fix listed

References

  • 28291 third-party-advisory vendor-advisory
  • 4861 exploit third-party-advisory vdb-entry