Unscored CVE-2004-1203 EUVD-2004-1200GHSA-gr6f-v7pv-5m9g

parser.php in phpCMS 1.2.1 and earlier, with non-stealth and debug modes enabled, allows remote attackers to gain sensitive information via…

Published Dec 15, 2004 · Updated Aug 8, 2024 · Assigned by mitre

Description

parser.php in phpCMS 1.2.1 and earlier, with non-stealth and debug modes enabled, allows remote attackers to gain sensitive information via an invalid file parameter, which reveals the web server's installation path.

References

20041126 phpCMS <= 1.2.1 Xss Vulnerability, Information disclosure mailing-list
phpcms-parser-xss(18272) vdb-entry
20041126 phpCMS <= 1.2.1 Xss Vulnerability, Information disclosure mailing-list
phpcms-parser-path-disclosure(18279) vdb-entry