Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-496j-c3w9-r7gw

Опубликовано: 01 мая 2022
Источник: github
Github: Не прошло ревью

Описание

categoria.php in LiveCMS 3.4 and earlier allows remote attackers to obtain sensitive information via a ' (quote) character in the cid parameter, which reveals the path in a forced SQL error message.

categoria.php in LiveCMS 3.4 and earlier allows remote attackers to obtain sensitive information via a ' (quote) character in the cid parameter, which reveals the path in a forced SQL error message.

EPSS

Процентиль: 91%
0.06117
Низкий

Связанные уязвимости

nvd
больше 18 лет назад

categoria.php in LiveCMS 3.4 and earlier allows remote attackers to obtain sensitive information via a ' (quote) character in the cid parameter, which reveals the path in a forced SQL error message.

EPSS

Процентиль: 91%
0.06117
Низкий