CVEvulnerability
CVE-2002-0445
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2002-07-26
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
Description
article.php in PHP FirstPost 0.1 allows allows remote attackers to obtain the full pathname of the server via an invalid post number in the post parameter, which leaks the pathname in an error message.
Affected configurations
• php firstpost php firstpost 0.1
References
- http://www.iss.net/security_center/static/8434.php Vendor Advisory
- http://www.osvdb.org/7170 www.osvdb.org
- http://www.securityfocus.com/archive/1/261337 Vendor Advisory
- http://www.securityfocus.com/bid/4274 Vendor Advisory
- http://www.iss.net/security_center/static/8434.php Vendor Advisory
- http://www.osvdb.org/7170 www.osvdb.org
- http://www.securityfocus.com/archive/1/261337 Vendor Advisory
- http://www.securityfocus.com/bid/4274 Vendor Advisory