vendor:
phpBBmod
by:
SecurityFocus
7.5
CVSS
HIGH
Information Disclosure
200
CWE
Product Name: phpBBmod
Affected Version From: 1.3.2003
Affected Version To: 1.3.2003
Patch Exists: No
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2002
phpBBmod phpinfo.php Information Disclosure Vulnerability
phpBBmod ships with a sample script (phpinfo.php) that may disclosure sensitive information to remote attackers. When this script is accessed, sensitive information about the underlying environment will be revealed.
Mitigation:
Remove the phpinfo.php script from the web server.