CVE-2002-2349

CVE-2002-2349 describes an information disclosure vulnerability in phpBBmod version 1.3.3, where the phpinfo.php script directly executes the phpinfo function. This allows remote attackers to gain sensitive environment information from the server. With a CVSS score of 5.0, this vulnerability is of medium severity, requiring no authentication or complex attack vectors, and primarily impacts confidentiality. While not listed on the KEV catalog, an ExploitDB entry (EDB-21931) confirms the existence of exploit code, though there is no evidence of active exploitation, Metasploit modules, or significant community discussion or media coverage.