Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-7jwc-9pmp-wf2g

Опубликовано: 01 мая 2022
Источник: github
Github: Не прошло ревью

Описание

HotPlug CMS stores sensitive information under the web root with insufficient access control, which allows remote attackers to read the admin password and database credentials via a direct request for includes/class/config.inc.

HotPlug CMS stores sensitive information under the web root with insufficient access control, which allows remote attackers to read the admin password and database credentials via a direct request for includes/class/config.inc.

EPSS

Процентиль: 53%
0.00306
Низкий

Связанные уязвимости

nvd
больше 19 лет назад

HotPlug CMS stores sensitive information under the web root with insufficient access control, which allows remote attackers to read the admin password and database credentials via a direct request for includes/class/config.inc.

EPSS

Процентиль: 53%
0.00306
Низкий