| عنوان | givanz Vvveb Vvveb 1.0.7.2 Information Disclosure |
|---|
| الوصف | A vulnerability in Vvveb CMS allows remote attackers to access sensitive configuration files and system information through direct HTTP requests. The default installation lacks proper access controls, enabling unauthorized retrieval of files including composer.json, docker-compose.yaml, php.ini, nginx configuration files, and build scripts. The docker-compose.yaml file contains database credentials (username: vvveb, password: vvveb) which could be reused for admin panel access or other services. |
|---|
| المستخدم | KhanMarshal (UID 89610) |
|---|
| ارسال | 17/09/2025 12:07 PM (1 سنة منذ) |
|---|
| الاعتدال | 26/09/2025 10:24 AM (9 days later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 325964 [givanz Vvveb حتى 1.0.7.2 Configuration File الكشف عن المعلومات] |
|---|
| النقاط | 20 |
|---|