CVE-2011-5144

Опубликовано: 31 авг. 2012

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

Open Business Management (OBM) 2.4.0-rc13 and earlier allows remote attackers to obtain configuration information via a direct request to test.php, which calls the phpinfo function.

Ссылки

http://osvdb.org/78009
Exploit
http://secunia.com/advisories/47139
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/71924
https://www.htbridge.ch/advisory/multiple_vulnerabilities_in_obm.html
Exploit
http://osvdb.org/78009
Exploit
http://secunia.com/advisories/47139
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/71924
https://www.htbridge.ch/advisory/multiple_vulnerabilities_in_obm.html
Exploit

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:obm:open_business_management:*:rc13:*:*:*:*:*:*

Версия до 2.4.0 (включая)

EPSS

Процентиль: 72%

0.01489

Низкий

5 Medium

CVSS2

Дефекты

CWE-264

Связанные уязвимости

CVE-2011-5144

ubuntu

около 14 лет назад

Open Business Management (OBM) 2.4.0-rc13 and earlier allows remote attackers to obtain configuration information via a direct request to test.php, which calls the phpinfo function.

GHSA-m4p3-r3rv-7rrm

github

больше 4 лет назад

Open Business Management (OBM) 2.4.0-rc13 and earlier allows remote attackers to obtain configuration information via a direct request to test.php, which calls the phpinfo function.

EPSS

Процентиль: 72%

0.01489

Низкий

5 Medium

CVSS2

Дефекты

CWE-264