Description
The installation procedure for Invision Board suggests that users install the phpinfo.php program under the web root, which leaks sensitive information such as absolute pathnames, OS information, and PHP settings.
References
- 20020924 Information Disclosure with Invision Board installation (fwd) mailing-list
- invision-phpinfo-information-disclosure(10178) vdb-entry
- 3356 vdb-entry
- 5789 vdb-entry