CVE-2002-0240

PHP, when installed with Apache and configured to search for index.php as a default web page, allows remote attackers to obtain the full pathname of the server…

published May 3, 2002

CVSS
—
EPSS
7%
Percentile
94.4
In the wild
Unconfirmed
What it is

PHP, when installed with Apache and configured to search for index.php as a default web page, allows remote attackers to obtain the full pathname of the server via the HTTP OPTIONS method, which reveals the pathname in the resulting error message.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.07422 · 94.4th percentile
Published
2002-05-03T04:00Z
EPSS history
Timeline
  • 03 MAY 04:00Z
    PHP, when installed with Apache and configured to search for index.php as a default web page, allows remote attackers to obtain the full pathname of the server…
    cvelistv5