Описание
index.php in phpAdultSite CMS, possibly 2.3.2, allows remote attackers to obtain the full installation path via an invalid results_per_page parameter, which leaks the path in an error message. NOTE: this issue might be resultant from a separate SQL injection vulnerability.
Ссылки
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:phpadultsite:phpadultsite_cms:2.3.2:*:*:*:*:*:*:*
EPSS
Процентиль: 46%
0.00235
Низкий
5 Medium
CVSS2
Дефекты
CWE-200
Связанные уязвимости
github
больше 3 лет назад
index.php in phpAdultSite CMS, possibly 2.3.2, allows remote attackers to obtain the full installation path via an invalid results_per_page parameter, which leaks the path in an error message. NOTE: this issue might be resultant from a separate SQL injection vulnerability.
EPSS
Процентиль: 46%
0.00235
Низкий
5 Medium
CVSS2
Дефекты
CWE-200