Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-848g-j7cv-9644

Опубликовано: 02 мая 2022
Источник: github
Github: Не прошло ревью

Описание

phpBMS 0.96 allows remote attackers to obtain sensitive information via a direct request to (1) footer.php, (2) header.php, (3) the show action in advancedsearch.php, and (4) choicelist.php, which reveals the installation path in an error message.

phpBMS 0.96 allows remote attackers to obtain sensitive information via a direct request to (1) footer.php, (2) header.php, (3) the show action in advancedsearch.php, and (4) choicelist.php, which reveals the installation path in an error message.

EPSS

Процентиль: 88%
0.03673
Низкий

Дефекты

CWE-200

Связанные уязвимости

nvd
больше 16 лет назад

phpBMS 0.96 allows remote attackers to obtain sensitive information via a direct request to (1) footer.php, (2) header.php, (3) the show action in advancedsearch.php, and (4) choicelist.php, which reveals the installation path in an error message.

EPSS

Процентиль: 88%
0.03673
Низкий

Дефекты

CWE-200