CVE-2008-4207 Attachmax Dolphin 2.1.0 and earlier does not properly protect info.php in the main folder, which allows remote attackers to obtain sensitive information via a direct request, which invokes the phpinfo...
MediumCVSS 5.0
EPSS 3.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Attachmax Dolphin 2.1.0 and earlier does not properly protect info.php in the main folder, which allows remote attackers to obtain sensitive information via a direct request, which invokes the phpinfo function. NOTE: some of these details are obtained from third party information.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| attachmax dolphin | = 2.1.0 | No fix listed |