CVE-2004-1203 Information disclosure in n/a

What is CVE-2004-1203?

CVE-2004-1203 is a medium-severity vulnerability in n/a, published on 15 Dec 2004. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

parser.php in phpCMS 1.2.1 and earlier, with non-stealth and debug modes enabled, allows remote attackers to gain sensitive information via an invalid file parameter, which reveals the web server's installation path.

Which versions are affected by CVE-2004-1203?

It affects 1 product.

Products include Phpcms Phpcms.

How do I fix CVE-2004-1203?

No fix has been published for CVE-2004-1203 yet. Limit exposure of the affected software until one is available.

Is CVE-2004-1203 being exploited?

There is no known exploitation of CVE-2004-1203 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2020-22199 SQL injection in n/a Critical 9.8
• CVE-2020-22203 SQL injection in n/a Critical 9.8
• CVE-2018-19127 Code injection in n/a Critical 9.8
• CVE-2020-22201 Code injection in n/a High 8.8
• CVE-2008-0513 Path traversal in n/a High 7.8

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-gr6f-v7pv-5m9g.