Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The administrator/phpinfo.php script in Mambo Site Server 4.0.11 allows remote attackers to obtain sensitive information such as the full web root path via phpinfo.php, which calls the phpinfo function.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Mambo Site Server phpinfo.php信息泄露漏洞
Vulnerability Description
Mambo Site Server是一款免费开放源代码WEB内容管理工具，由PHP编写。 Mambo包含的默认脚本对用户请求应答不正确，远程攻击者可以利用这个漏洞获得服务器信息，如路径和环境变量。 Mambo管理目录包含的默认脚本phpinfo.php可远程被用户访问，攻击者可以直接访问此脚本，而获得大量如路径，PHP设置，环境变量等敏感信息。
CVSS Information
N/A
Vulnerability Type
N/A