CVE-2002-1149: Medium severity invision power services invision board vulnerability
The installation procedure for Invision Board suggests that users install the phpinfo.php program under the web root, which leaks sensitive information such as absolute pathnames, OS information, and PHP settings.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2002-1149?
CVE-2002-1149 is classified as a medium severity vulnerability due to the exposure of sensitive information.
How does CVE-2002-1149 affect Invision Board?
CVE-2002-1149 affects Invision Board by allowing unauthorized access to sensitive information through the improper placement of the phpinfo.php file.
How do I fix CVE-2002-1149?
To fix CVE-2002-1149, you should remove the phpinfo.php script from the web root directory and restrict access to sensitive files.
Which versions of Invision Board are affected by CVE-2002-1149?
CVE-2002-1149 affects Invision Board versions 1.0 and 1.0.1.
What information is leaked due to CVE-2002-1149?
CVE-2002-1149 leaks sensitive information such as absolute pathnames, operating system details, and PHP configuration settings.