| Package | Affected versions | Patched versions |
|---|---|---|
| phpcms | = 1.1.9= 1.2.0= 1.2.1 |
parser.php in phpCMS 1.2.1 and earlier, with non-stealth and debug modes enabled, allows remote attackers to gain sensitive information via an invalid file parameter, which reveals the web server's installation path.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free