Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-fc3h-fgjq-4hqp

Опубликовано: 14 мая 2022
Источник: github
Github: Не прошло ревью

Описание

news.php in SimpNews 2.47.3 and earlier allows remote attackers to obtain sensitive information via an invalid lang parameter, which reveals the installation path in an error message.

news.php in SimpNews 2.47.3 and earlier allows remote attackers to obtain sensitive information via an invalid lang parameter, which reveals the installation path in an error message.

EPSS

Процентиль: 48%
0.0025
Низкий

Дефекты

CWE-200

Связанные уязвимости

nvd
больше 15 лет назад

news.php in SimpNews 2.47.3 and earlier allows remote attackers to obtain sensitive information via an invalid lang parameter, which reveals the installation path in an error message.

EPSS

Процентиль: 48%
0.0025
Низкий

Дефекты

CWE-200