Логотип exploitDog
bind:CVE-2016-3952
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2016-3952

Количество 4

Количество 4

ubuntu логотип

CVE-2016-3952

около 8 лет назад

web2py before 2.14.1, when using the standalone version, allows remote attackers to obtain environment variable values via a direct request to examples/template_examples/beautify. NOTE: this issue can be leveraged by remote attackers to gain administrative access.

CVSS3: 7.8
EPSS: Низкий
nvd логотип

CVE-2016-3952

около 8 лет назад

web2py before 2.14.1, when using the standalone version, allows remote attackers to obtain environment variable values via a direct request to examples/template_examples/beautify. NOTE: this issue can be leveraged by remote attackers to gain administrative access.

CVSS3: 7.8
EPSS: Низкий
debian логотип

CVE-2016-3952

около 8 лет назад

web2py before 2.14.1, when using the standalone version, allows remote ...

CVSS3: 7.8
EPSS: Низкий
github логотип

GHSA-jpvh-fwvr-cpwh

больше 3 лет назад

web2py before 2.14.1, when using the standalone version, allows remote attackers to obtain environment variable values via a direct request to examples/template_examples/beautify. NOTE: this issue can be leveraged by remote attackers to gain administrative access.

CVSS3: 7.8
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2016-3952

web2py before 2.14.1, when using the standalone version, allows remote attackers to obtain environment variable values via a direct request to examples/template_examples/beautify. NOTE: this issue can be leveraged by remote attackers to gain administrative access.

CVSS3: 7.8
0%
Низкий
около 8 лет назад
nvd логотип
CVE-2016-3952

web2py before 2.14.1, when using the standalone version, allows remote attackers to obtain environment variable values via a direct request to examples/template_examples/beautify. NOTE: this issue can be leveraged by remote attackers to gain administrative access.

CVSS3: 7.8
0%
Низкий
около 8 лет назад
debian логотип
CVE-2016-3952

web2py before 2.14.1, when using the standalone version, allows remote ...

CVSS3: 7.8
0%
Низкий
около 8 лет назад
github логотип
GHSA-jpvh-fwvr-cpwh

web2py before 2.14.1, when using the standalone version, allows remote attackers to obtain environment variable values via a direct request to examples/template_examples/beautify. NOTE: this issue can be leveraged by remote attackers to gain administrative access.

CVSS3: 7.8
0%
Низкий
больше 3 лет назад

Уязвимостей на страницу