Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-2pvh-xf99-r989

Опубликовано: 14 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

In Webgalamb through 7.0, log files are exposed to the internet with predictable files/logs/sql_error_log/YYYY-MM-DD-sql_error_log.log filenames. The log file could contain sensitive client data (email addresses) and also facilitates exploitation of SQL injection errors.

In Webgalamb through 7.0, log files are exposed to the internet with predictable files/logs/sql_error_log/YYYY-MM-DD-sql_error_log.log filenames. The log file could contain sensitive client data (email addresses) and also facilitates exploitation of SQL injection errors.

EPSS

Процентиль: 71%
0.00691
Низкий

7.5 High

CVSS3

Дефекты

CWE-532

Связанные уязвимости

CVSS3: 7.5
nvd
почти 7 лет назад

In Webgalamb through 7.0, log files are exposed to the internet with predictable files/logs/sql_error_log/YYYY-MM-DD-sql_error_log.log filenames. The log file could contain sensitive client data (email addresses) and also facilitates exploitation of SQL injection errors.

EPSS

Процентиль: 71%
0.00691
Низкий

7.5 High

CVSS3

Дефекты

CWE-532