exploitDog

GHSA-m4p3-r3rv-7rrm

Опубликовано: 17 мая 2022

Источник: github

Github: Не прошло ревью

Описание

Open Business Management (OBM) 2.4.0-rc13 and earlier allows remote attackers to obtain configuration information via a direct request to test.php, which calls the phpinfo function.

Open Business Management (OBM) 2.4.0-rc13 and earlier allows remote attackers to obtain configuration information via a direct request to test.php, which calls the phpinfo function.

Ссылки

https://nvd.nist.gov/vuln/detail/CVE-2011-5144
https://exchange.xforce.ibmcloud.com/vulnerabilities/71924
https://www.htbridge.ch/advisory/multiple_vulnerabilities_in_obm.html
http://osvdb.org/78009
http://secunia.com/advisories/47139

EPSS

Процентиль: 72%

0.01489

Низкий

CVE ID

Связанные уязвимости

CVE-2011-5144

ubuntu

около 14 лет назад

Open Business Management (OBM) 2.4.0-rc13 and earlier allows remote attackers to obtain configuration information via a direct request to test.php, which calls the phpinfo function.

CVE-2011-5144

nvd

около 14 лет назад

Open Business Management (OBM) 2.4.0-rc13 and earlier allows remote attackers to obtain configuration information via a direct request to test.php, which calls the phpinfo function.

EPSS

Процентиль: 72%

0.01489

Низкий

CVE ID