CVE-2002-0249

PHP for Windows, when installed on Apache 2.0.28 beta as a standalone CGI module, allows remote attackers to obtain the physical path of the php.exe via a…

published May 3, 2002

CVSS
—
EPSS
7%
Percentile
94.3
In the wild
Unconfirmed
What it is

PHP for Windows, when installed on Apache 2.0.28 beta as a standalone CGI module, allows remote attackers to obtain the physical path of the php.exe via a request with malformed arguments such as /123, which leaks the pathname in the error message.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.07213 · 94.3th percentile
Published
2002-05-03T04:00Z
EPSS history
Timeline
  • 03 MAY 04:00Z
    PHP for Windows, when installed on Apache 2.0.28 beta as a standalone CGI module, allows remote attackers to obtain the physical path of the php.exe via a…
    cvelistv5