Описание
PHP-Nuke 7.0 allows remote attackers to obtain the installation path via certain characters such as (1) ", (2) ', or (3) > in the search field, which reveals the path in an error message.
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:francisco_burzi:php-nuke:7.0:*:*:*:*:*:*:*
EPSS
Процентиль: 2%
0.00013
Низкий
5 Medium
CVSS2
Дефекты
CWE-200
Связанные уязвимости
github
почти 4 года назад
PHP-Nuke 7.0 allows remote attackers to obtain the installation path via certain characters such as (1) ", (2) ', or (3) > in the search field, which reveals the path in an error message.
EPSS
Процентиль: 2%
0.00013
Низкий
5 Medium
CVSS2
Дефекты
CWE-200