| 제목 | givanz Vvveb Vvveb 1.0.7.2 Information Disclosure |
|---|
| 설명 | A vulnerability in Vvveb CMS allows remote attackers to access sensitive configuration files and system information through direct HTTP requests. The default installation lacks proper access controls, enabling unauthorized retrieval of files including composer.json, docker-compose.yaml, php.ini, nginx configuration files, and build scripts. The docker-compose.yaml file contains database credentials (username: vvveb, password: vvveb) which could be reused for admin panel access or other services. |
|---|
| 사용자 | KhanMarshal (UID 89610) |
|---|
| 제출 | 2025. 09. 17. PM 12:07 (1 년도 ago) |
|---|
| 모더레이션 | 2025. 09. 26. AM 10:24 (9 days later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 325964 [givanz Vvveb 까지 1.0.7.2 Configuration File 정보 공개] |
|---|
| 포인트들 | 20 |
|---|