CVE-2004-1203

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2005-01-10 · updated 2026-06-16

Description

parser.php in phpCMS 1.2.1 and earlier, with non-stealth and debug modes enabled, allows remote attackers to gain sensitive information via an invalid file parameter, which reveals the web server's installation path.

Affected products

Phpcms: 1.1.9, 1.2.0, 1.2.1

References

http://lists.grok.org.uk/pipermail/full-disclosure/2004-November/029499.html
http://marc.info/?l=bugtraq&m=110149207123510&w=2
https://exchange.xforce.ibmcloud.com/vulnerabilities/18272
https://exchange.xforce.ibmcloud.com/vulnerabilities/18279
http://lists.grok.org.uk/pipermail/full-disclosure/2004-November/029499.html
http://marc.info/?l=bugtraq&m=110149207123510&w=2
https://exchange.xforce.ibmcloud.com/vulnerabilities/18272
https://exchange.xforce.ibmcloud.com/vulnerabilities/18279

Get alerted when CVE-2004-1203 or the next vulnerability affects your stack