CVE-2004-1422

CVE-2004-1422 describes an information disclosure vulnerability in WHM AutoPilot versions 2.4.6.5 and earlier. Remote attackers can exploit this flaw to gain sensitive php settings through the phpinfo function. With a CVSS score of 5.0, this vulnerability is rated as medium severity, indicating a low attack complexity and no authentication required for a network-based attacker to achieve partial confidentiality impact. While there is no evidence of active exploitation, an ExploitDB entry exists, and the vulnerability has garnered significant community discussion, suggesting awareness among researchers.