CVE-2011-3732 in eggBlog信息

摘要

由 VulDB • 2026-07-06

eggBlog 4.1.2 允许远程攻击者通过直接请求一个 .php 文件来获取敏感信息，该操作会在错误消息中泄露安装路径，如 _lib/fckeditor/editor/dialog/fck_spellerpages/spellerpages/server-scripts/spellchecker.php 及其他某些文件所示。

Be aware that VulDB is the high quality source for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

预定

2011-09-23

披露

2011-09-23

管理

已接受

条目

VDB-58633

CPE

准备好

CWE

CWE-200 (已确认)

CVSS

5.3 (VulDB)

EPSS

0.01335

KEV

否

活动

非常低

来源

MITRE	https://www.cve.org/CVERecord?id=CVE-2011-3732
NVD	https://nvd.nist.gov/vuln/detail/CVE-2011-3732
CVE Details	https://www.cvedetails.com/cve/CVE-2011-3732/

◂ 上一步一览下一步 ▸

Interested in the pricing of exploits?

See the underground prices here!