Описание
Froxlor before 0.9.33.2 with the default configuration/setup might allow remote attackers to obtain the database password by reading /logs/sql-error.log.
Ссылки
- Mailing List
- Third Party AdvisoryVDB Entry
- PatchThird Party Advisory
- Mailing List
- Third Party AdvisoryVDB Entry
- PatchThird Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 0.9.33.1 (включая)
cpe:2.3:a:froxlor:froxlor:*:*:*:*:*:*:*:*
EPSS
Процентиль: 80%
0.01459
Низкий
9.8 Critical
CVSS3
5 Medium
CVSS2
Дефекты
CWE-200
Связанные уязвимости
CVSS3: 9.8
debian
больше 8 лет назад
Froxlor before 0.9.33.2 with the default configuration/setup might all ...
CVSS3: 9.8
github
больше 3 лет назад
Froxlor before 0.9.33.2 with the default configuration/setup might allow remote attackers to obtain the database password by reading /logs/sql-error.log.
EPSS
Процентиль: 80%
0.01459
Низкий
9.8 Critical
CVSS3
5 Medium
CVSS2
Дефекты
CWE-200