Unscored CVE-2002-1725 EUVD-2002-1704GHSA-wvp2-c5xv-9vm5

phpimageview.php in PHPImageView 1.0 allows remote attackers to obtain sensitive information via the pw=show option, which invokes the phpi…

Published Jun 21, 2005 · Updated Aug 8, 2024 · Assigned by mitre

Description

phpimageview.php in PHPImageView 1.0 allows remote attackers to obtain sensitive information via the pw=show option, which invokes the phpinfo function.

References

4668 vdb-entry
phpimageview-phpinfo-gain-info(9001) vdb-entry
http://www.ifrance.com/kitetoua/tuto/5holes4.txt
20020504 Security holes : PHP Image View, NewsPro, Photo DB, As_web, GuestBook mailing-list