VULNERABILITY INTELLIGENCE
CVE-2002-1149
CVSS score5 MEDIUM
EPSS probability1.97%
CISA KEVNot currently listed
Published2002-10-11
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:N/A:N
Description
The installation procedure for Invision Board suggests that users install the phpinfo.php program under the web root, which leaks sensitive information such as absolute pathnames, OS information, and PHP settings.