Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-8h7j-gpm5-m5fv

Опубликовано: 01 мая 2022
Источник: github
Github: Не прошло ревью

Описание

DGNews 2.1 allows remote attackers to obtain sensitive information via a fullnews request to news.php with an invalid newsid parameter, and other unspecified vectors, which reveal the path in various error messages.

DGNews 2.1 allows remote attackers to obtain sensitive information via a fullnews request to news.php with an invalid newsid parameter, and other unspecified vectors, which reveal the path in various error messages.

EPSS

Процентиль: 64%
0.00465
Низкий

Связанные уязвимости

nvd
больше 18 лет назад

DGNews 2.1 allows remote attackers to obtain sensitive information via a fullnews request to news.php with an invalid newsid parameter, and other unspecified vectors, which reveal the path in various error messages.

EPSS

Процентиль: 64%
0.00465
Низкий