CVE-2002-2289

soinfo.php in BadBlue 1.7.1 calls the phpinfo function, which allows remote attackers to gain sensitive information including ODBC passwords.

Scoring

CVSS base score
0.03
EPSS probability
0.52%
Published
2007-10-18
Last modified
2026-03-16

Affected products

Markdown version · Browse all CVEs