Описание
CakePHP 1.3.7 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by dispatcher.php and certain other files.
| Релиз | Статус | Примечание |
|---|---|---|
| artful | ignored | end of life |
| bionic | DNE | |
| devel | not-affected | |
| esm-apps-legacy/xenial | not-affected | 2.8.0-1 |
| esm-apps/xenial | not-affected | 2.8.0-1 |
| esm-infra-legacy/trusty | DNE | trusty/esm was DNE [trusty was not-affected [1.3.15-1+deb7u2build0.14.04.1]] |
| hardy | ignored | end of life |
| lucid | ignored | end of life |
| maverick | ignored | end of life |
| natty | ignored | end of life |
Показывать по
10
Ссылки на источники
5 Medium
CVSS2
Связанные уязвимости
nvd
почти 15 лет назад
CakePHP 1.3.7 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by dispatcher.php and certain other files.
github
больше 4 лет назад
CakePHP 1.3.7 allows remote attackers to obtain sensitive information via a direct request to a .php file
5 Medium
CVSS2