CVE-2006-1105

State: Published
Severity: Not scored
Published: Mar 9, 2006
Updated: Aug 7, 2024
Reserved: Mar 9, 2006

Description

Pixelpost 1.5 beta 1 and earlier allows remote attackers to obtain configuration information via a direct request to includes/phpinfo.php, which calls the phpinfo function. NOTE: the vendor has disputed some issues from the original disclosure, but due to the vagueness of the dispute, it is not clear whether the vendor is disputing this particular issue.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

http://forum.pixelpost.org/showthread.php?t=3535
http://www.neosecurityteam.net/index.php?action=advisories&id=19
20060304 Pixel Post Multiple Vulnerabilitiesmailing-list
16964vdb-entry
pixelpost-phpinfo-obtain-information(25048)vdb-entry
ADV-2006-0823vdb-entry

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.