Loading vulnerability details…
CVSS v3.1
N/A
EPSS
1.43%
Published
Dec 31, 2005
Modified
Jun 16, 2026
Public PoC / Exploit (1)
All weaponized →Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.
Description
index.php in BugPort 1.147 and earlier allows remote attackers to obtain sensitive information such as full path and system configuration via an invalid action parameter.
Affected Products (109)
References (10)
...and 59 more