PT-2011-4666
CVE-2011-3776
·
تاريخ النشر
2011-09-24
·
تاريخ التحديث
2017-08-29
الوصف من
CVSS 2.0
5.0
متوسطةالمقاييسAV:N/AC:L/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions
phpFormGenerator version 2.09
Description
The issue allows remote attackers to obtain sensitive information via a direct request to a .php file. This is demonstrated by accessing the 'forms/process.php' endpoint, which reveals the installation path in an error message.
Recommendations
For phpFormGenerator version 2.09, consider restricting access to the 'forms/process.php' endpoint to minimize the risk of exploitation. Additionally, ensure that error messages do not reveal sensitive information, such as installation paths.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾