{"id":"CVE-2003-1371","aliases":["EUVD-2003-1361","GHSA-hcw3-qmmj-pxw7"],"status":"published","title":"Nuked-Klan 1.3b, and possibly earlier versions, allows remote attackers to obtain sensitive...","description":"Nuked-Klan 1.3b, and possibly earlier versions, allows remote attackers to obtain sensitive server information via an op parameter set to phpinfo for the (1) Team, (2) News, or (3) Liens modules.","severity":{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.0332,"percentile":0.88658,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-79"],"published":"2003-12-31T05:00:00Z","modified":"2026-06-16T22:04:02Z","exploits":[{"source":"exploitdb","id":"EDB-22277","title":"Nuked-klaN 1.3 - Remote Information Disclosure","type":"webapps","platform":"php","date":"2003-02-23","verified":true,"url":"https://www.exploit-db.com/exploits/22277"}],"products":[{"vendor":"nuked-klan","product":"nuked-klan"}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/11424","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2003-02/0276.html","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred","Exploit"]},{"url":"http://www.securityfocus.com/bid/6917","tags":["vdb-entry","x_refsource_BID","x_transferred","Exploit"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2003-1371"},{"url":"https://github.com/advisories/GHSA-hcw3-qmmj-pxw7"}],"sources":{"cve":[{"id":"CVE-2003-1371","description":"Nuked-Klan 1.3b, and possibly earlier versions, allows remote attackers to obtain sensitive server information via an op parameter set to phpinfo for the (1) Team, (2) News, or (3) Liens modules.","status":"published","published":"2007-10-17T01:00:00Z","modified":"2024-08-08T02:28:02.839Z","updated_at":"2026-11-02T14:20:16.411288Z"}],"euvd":[{"id":"EUVD-2003-1361","description":"Nuked-Klan 1.3b, and possibly earlier versions, allows remote attackers to obtain sensitive server information via an op parameter set to phpinfo for the (1) Team, (2) News, or (3) Liens modules.","status":"published","published":"2007-10-17T01:00:00Z","modified":"2024-08-08T02:28:02Z","updated_at":"2026-11-03T01:15:03.888222Z"}],"ghsa":[{"id":"GHSA-hcw3-qmmj-pxw7","title":"Nuked-Klan 1.3b, and possibly earlier versions, allows remote attackers to obtain sensitive...","description":"Nuked-Klan 1.3b, and possibly earlier versions, allows remote attackers to obtain sensitive server information via an op parameter set to phpinfo for the (1) Team, (2) News, or (3) Liens modules.","status":"published","published":"2022-04-29T01:27:57Z","modified":"2023-01-30T05:01:59Z","cwes":["CWE-79"],"updated_at":"2026-11-02T14:46:32.185763Z"}],"nvd":[{"id":"CVE-2003-1371","description":"Nuked-Klan 1.3b, and possibly earlier versions, allows remote attackers to obtain sensitive server information via an op parameter set to phpinfo for the (1) Team, (2) News, or (3) Liens modules.","status":"published","published":"2003-12-31T05:00:00Z","modified":"2026-06-16T22:04:02.403Z","cvss":[{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:00:48.212104Z"}]}}