Nuked-Klan 1.3b, and possibly earlier versions, allows remote attackers to obtain sensitive server information via an op parameter set to phpinfo for the (1) Team, (2) News, or (3) Liens modules.
References
Configurations
History
20 Nov 2024, 23:46
Type | Values Removed | Values Added |
---|---|---|
References | () http://archives.neohapsis.com/archives/bugtraq/2003-02/0276.html - Exploit | |
References | () http://www.securityfocus.com/bid/6917 - Exploit | |
References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/11424 - |
Information
Published : 2003-12-31 05:00
Updated : 2024-11-20 23:46
NVD link : CVE-2003-1371
Mitre link : CVE-2003-1371
CVE.ORG link : CVE-2003-1371
JSON object : View
Products Affected
nuked-klan
- nuked-klan
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')