CVE-2002-1149

Published: Oct 11, 2002Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

The installation procedure for Invision Board suggests that users install the phpinfo.php program under the web root, which leaks sensitive information such as absolute pathnames, OS information, and PHP settings.

Affected (2)

Products: Invision Power Services: Invision Board

Invision Power Services

1 product

Invision Board

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Invision Power Services Invision Board	Version 1.0.1
Invision Power Services Invision Board	Version 1.0

References (8)

http://marc.info/?l=bugtraq&m=103290602609197&w=2

Source: cve@mitre.org

http://www.iss.net/security_center/static/10178.php

Source: cve@mitre.org

Vendor Advisory

http://www.osvdb.org/3356

Source: cve@mitre.org

http://www.securityfocus.com/bid/5789

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=103290602609197&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.iss.net/security_center/static/10178.php

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.osvdb.org/3356

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/5789

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.