Описание
eLineStudio Site Composer (ESC) 2.6 and earlier allows remote attackers to obtain sensitive information via a direct request to (1) trigger.asp or (2) common2.asp in cms/include/, which reveals the database path.
Ссылки
- Exploit
- Exploit
Уязвимые конфигурации
Конфигурация 1Версия до 2.6 (включая)
Одно из
cpe:2.3:a:elinestudio:site_composer:*:*:*:*:*:*:*:*
cpe:2.3:a:elinestudio:site_composer:2.5:*:*:*:*:*:*:*
EPSS
Процентиль: 90%
0.05342
Низкий
5 Medium
CVSS2
Дефекты
CWE-200
Связанные уязвимости
github
почти 4 года назад
eLineStudio Site Composer (ESC) 2.6 and earlier allows remote attackers to obtain sensitive information via a direct request to (1) trigger.asp or (2) common2.asp in cms/include/, which reveals the database path.
EPSS
Процентиль: 90%
0.05342
Низкий
5 Medium
CVSS2
Дефекты
CWE-200