Security Advisory
CVE-2004-1203
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
parser.php in phpCMS 1.2.1 and earlier, with non-stealth and debug modes enabled, allows remote attackers to gain sensitive information via an invalid file parameter, which reveals the web server's installation path.