templates/default/index.php in Redaxscript 0.3.2 allows remote attackers to obtain sensitive information via a direct request, which reveals the full path in an error message.
References
Link | Resource |
---|---|
https://www.htbridge.com/advisory/HTB22804 | Exploit |
Configurations
Information
Published : 2015-01-01 03:59
Updated : 2015-01-02 07:51
NVD link : CVE-2011-5314
Mitre link : CVE-2011-5314
JSON object : View
CWE
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
Products Affected
redaxscript
- redaxscript