Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2011-3821

Опубликовано: 24 сент. 2011
Источник: nvd
CVSS2: 5
EPSS Низкий

Описание

xajax 0.6 beta1 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by xajax_core/plugin_layer/xajaxScriptPlugin.inc.php and certain other files.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:xajax-project:xajax:0.6:beta1:*:*:*:*:*:*

EPSS

Процентиль: 68%
0.01263
Низкий

5 Medium

CVSS2

Дефекты

CWE-200

Связанные уязвимости

ubuntu
почти 15 лет назад

xajax 0.6 beta1 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by xajax_core/plugin_layer/xajaxScriptPlugin.inc.php and certain other files.

github
больше 4 лет назад

xajax 0.6 beta1 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by xajax_core/plugin_layer/xajaxScriptPlugin.inc.php and certain other files.

EPSS

Процентиль: 68%
0.01263
Низкий

5 Medium

CVSS2

Дефекты

CWE-200