CVE-2011-3753 in LinPHA

Riassunto

di MITRE

LinPHA 1.3.4 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by viewer.php and certain other files.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Prenotare: 23/09/2011
• Divulgazione: 23/09/2011
• Moderazione: accettato
• Voce: VDB-58654
• CPE: pronto
• CWE: CWE-200 (confermato)
• CVSS: 5.3 (VulDB)
• EPSS: 0.01335
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2011-3753
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2011-3753
• CVE Details: https://www.cvedetails.com/cve/CVE-2011-3753/