CVE-2006-4880

David Bennett PHP-Post (PHPp) 1.0 and earlier allows remote attackers to obtain sensitive information via a direct request for (1) footer.php, (2)…

published September 19, 2006

CVSS
—
EPSS
2%
Percentile
83.1
In the wild
Unconfirmed
What it is

David Bennett PHP-Post (PHPp) 1.0 and earlier allows remote attackers to obtain sensitive information via a direct request for (1) footer.php, (2) template.php, or (3) lastvisit.php, which reveals the installation path in various error messages.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02303 · 83.1th percentile
Published
2006-09-19T21:00Z
EPSS history
Timeline
  • 19 SEP 21:00Z
    David Bennett PHP-Post (PHPp) 1.0 and earlier allows remote attackers to obtain sensitive information via a direct request for (1) footer.php, (2)…
    cvelistv5