Description
The administrator/phpinfo.php script in Mambo Site Server 4.0.11 allows remote attackers to obtain sensitive information such as the full web root path via phpinfo.php, which calls the phpinfo function.
Affected products
- Mambo / mambo_site_server4.0.11 – 4.0.11