Unscored CVE-2002-0445 EUVD-2002-0442GHSA-cfh5-99ph-cp7h

article.php in PHP FirstPost 0.1 allows allows remote attackers to obtain the full pathname of the server via an invalid post number in the…

Published Sep 1, 2004 · Updated Aug 8, 2024 · Assigned by mitre

Description

article.php in PHP FirstPost 0.1 allows allows remote attackers to obtain the full pathname of the server via an invalid post number in the post parameter, which leaks the pathname in an error message.

References

phpfirstpost-path-disclosure(8434) vdb-entry
20020312 [ARL02-A05] PHP FirstPost System Information Path Disclosure Vulnerability mailing-list
4274 vdb-entry
7170 vdb-entry