5.0med
CVE-2002-22471 exploit
The administrator/phpinfo.php script in Mambo Site Server 4.0.11 allows remote attackers to obtain sensitive information such as the full w…
Published 23 y ago · modified 4 mo ago · JSON
CVSS
5.0
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
2.6%
percentile 85%
Public exploits
1
Exploit-DB
Summary
The administrator/phpinfo.php script in Mambo Site Server 4.0.11 allows remote attackers to obtain sensitive information such as the full web root path via phpinfo.php, which calls the phpinfo function.
Exploit prediction (EPSS)
2.57% probability of exploitation in the next 30 days, higher than 85% of all scored CVEs.
Exploits and detections
- EDB-22086 Mambo Site Server 4.0.11 - 'PHPInfo.php' Information Disclosure · webapps · 2002-12-12
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 2.0 | 5.0 | AV:N/AC:L/Au:N/C:P/I:N/A:N |
Classification
- Weakness
- CWE-16 Configuration
References
- exchange.xforce.ibmcloud.com /vulnerabilities/10853 · vdb-entry, x_refsource_XF, x_transferred
- archives.neohapsis.com /archives/bugtraq/2002-12/0111.html · mailing-list, x_refsource_BUGTRAQ, x_transferred
- securityfocus.com /bid/6376 · vdb-entry, x_refsource_BID, x_transferred
Sources
- CVE List: CVE-2002-2247
- NVD: CVE-2002-2247
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.