medium4.3Public exploit code
CVE-2003-1371
Nuked-Klan 1.3b, and possibly earlier versions, allows remote attackers to obtain sensitive server information via an op parameter set to phpinfo for the (1) T…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Nuked-klaN 1.3 - Remote Information Disclosure2003-02-23 · webapps · php · Verified
Impact
Nuked-Klan 1.3b, and possibly earlier versions, allows remote attackers to obtain sensitive server information via an op parameter set to phpinfo for the (1) Team, (2) News, or (3) Liens modules.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nuked-Klan | Nuked-Klan | Version 1.3_beta |
Weakness classification
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2003-02/0276.html
- http://www.securityfocus.com/bid/6917
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11424
- http://archives.neohapsis.com/archives/bugtraq/2003-02/0276.html
- http://www.securityfocus.com/bid/6917
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11424