SilverStripe 2.3.x before 2.3.6 allows remote attackers to obtain sensitive information via the (1) debug_memory parameter to core/control/Director.php or (2) debug_profile parameter to main.php.
References
Configurations
Configuration 1 (hide)
|
Information
Published : 2012-08-26 11:55
Updated : 2017-08-28 18:29
NVD link : CVE-2010-5188
Mitre link : CVE-2010-5188
JSON object : View
CWE
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
Products Affected
silverstripe
- silverstripe