PHPBBMod PHPInfo Information Disclosure Vulnerability
BID:5942
Info
PHPBBMod PHPInfo Information Disclosure Vulnerability
| Bugtraq ID: | 5942 |
| Class: | Configuration Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 10 2002 12:00AM |
| Updated: | Oct 10 2002 12:00AM |
| Credit: | Discovery of this issue is credited to "Roland Verlander" <[email protected]>. |
| Vulnerable: |
phpBBmod phpBBmod 1.3.3 |
| Not Vulnerable: | |
Discussion
PHPBBMod PHPInfo Information Disclosure Vulnerability
phpBBmod ships with a sample script (phpinfo.php) that may disclosure sensitive information to remote attackers. When this script is accessed, sensitive information about the underlying environment will be revealed.
This issue was reported in phpBBmod version 1.3.3. Other versions may also be affected.
phpBBmod ships with a sample script (phpinfo.php) that may disclosure sensitive information to remote attackers. When this script is accessed, sensitive information about the underlying environment will be revealed.
This issue was reported in phpBBmod version 1.3.3. Other versions may also be affected.
Exploit / POC
PHPBBMod PHPInfo Information Disclosure Vulnerability
This issue may be exploited with a web browser. The following example was submitted:
http://www.example.com/phpBB/phpinfo.php
This issue may be exploited with a web browser. The following example was submitted:
http://www.example.com/phpBB/phpinfo.php
Solution / Fix
PHPBBMod PHPInfo Information Disclosure Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.