Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-fhjm-rh64-w3x4

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Zend Framework 1.11.3 in Zend Server CE 5.1.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by Validate.php and certain other files.

Zend Framework 1.11.3 in Zend Server CE 5.1.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by Validate.php and certain other files.

EPSS

Процентиль: 51%
0.00283
Низкий

Дефекты

CWE-200

Связанные уязвимости

ubuntu
больше 14 лет назад

Zend Framework 1.11.3 in Zend Server CE 5.1.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by Validate.php and certain other files.

nvd
больше 14 лет назад

Zend Framework 1.11.3 in Zend Server CE 5.1.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by Validate.php and certain other files.

EPSS

Процентиль: 51%
0.00283
Низкий

Дефекты

CWE-200