Information Disclosure Vulnerability in 14all.cgi 1.1p15

CVE-2002-1677 · MEDIUM Severity

AV:N/AC:L/AU:N/C:P/I:N/A:N

14all.cgi 1.1p15 in mrtgconfig allows remote attackers to determine the physical path to the web root directory via a request with an invalid cfg parameter, which generates an error message that reveals the path.

Learn more about our Web App Pen Testing.