Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2011-3790

Опубликовано: 24 сент. 2011
Источник: nvd
CVSS2: 5
EPSS Низкий

Описание

Piwigo 2.1.5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by tools/metadata.php and certain other files.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:piwigo:piwigo:2.1.5:*:*:*:*:*:*:*

EPSS

Процентиль: 66%
0.01229
Низкий

5 Medium

CVSS2

Дефекты

CWE-200

Связанные уязвимости

ubuntu
почти 15 лет назад

Piwigo 2.1.5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by tools/metadata.php and certain other files.

github
больше 4 лет назад

Piwigo 2.1.5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by tools/metadata.php and certain other files.

EPSS

Процентиль: 66%
0.01229
Низкий

5 Medium

CVSS2

Дефекты

CWE-200