| Package | Affected versions | Patched versions |
|---|---|---|
| mambo site server | = 4.0.11 |
The administrator/phpinfo.php script in Mambo Site Server 4.0.11 allows remote attackers to obtain sensitive information such as the full web root path via phpinfo.php, which calls the phpinfo function.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free