First published: Tue Dec 31 2002(Updated: )
phpinfo.php in phpBBmod 1.3.3 executes the phpinfo function, which allows remote attackers to obtain sensitive environment information.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Phpbb Phpbbmod | =1.3.3 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2002-2349 is considered to have a moderate severity due to the potential exposure of sensitive environment information.
Fix CVE-2002-2349 by removing or restricting access to the phpinfo.php script in phpBBmod 1.3.3.
CVE-2002-2349 specifically affects phpBBmod version 1.3.3.
Yes, CVE-2002-2349 can be exploited remotely by attackers to obtain sensitive information.
CVE-2002-2349 may expose configuration and environment details that could aid an attacker in further exploits.