← Database

CVE-2002-2247

MEDIUM CVSS: 5.0 Published: 2002-12-31 Modified: 2026-06-16

Description

The administrator/phpinfo.php script in Mambo Site Server 4.0.11 allows remote attackers to obtain sensitive information such as the full web root path via phpinfo.php, which calls the phpinfo function.

Affected Platforms

Mambo Mambo Site Server

Weakness Type

CWE-16

References