DLGuard 4.5 allows remote attackers to obtain the installation path via the c parameter to index.php.
References
Configurations
History
21 Nov 2024, 02:27
Type | Values Removed | Values Added |
---|---|---|
References | () http://seclists.org/fulldisclosure/2015/Feb/67 - | |
References | () http://tetraph.com/security/full-path-disclosure-vulnerability/dlguard-full-path-disclosure-information-leakage-security-vulnerabilities/ - | |
References | () http://www.securityfocus.com/bid/72685 - |
Information
Published : 2015-03-04 20:59
Updated : 2024-11-21 02:27
NVD link : CVE-2015-2209
Mitre link : CVE-2015-2209
CVE.ORG link : CVE-2015-2209
JSON object : View
Products Affected
dlguard
- dlguard
CWE
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor