PT-2006-3885
CVE-2006-2978
·
تاريخ النشر
2006-06-12
·
تاريخ التحديث
2018-10-18
الوصف من
CVSS 2.0
5.0
متوسطةالمقاييسAV:N/AC:L/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Mafia Moblog versions 0.6M1 and earlier
Description
The issue allows remote attackers to obtain the installation path in an error message. This can be achieved by making a direct request to API endpoints such as "big.php" and "upgrade.php".
Recommendations
For Mafia Moblog versions 0.6M1 and earlier, consider restricting access to the "big.php" and "upgrade.php" API endpoints until a patch is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾