PT-2018-9633

CVE-2018-10028

Published

2018-04-11

Updated

2018-05-11

CVSS 3.1

5.3

Medium

MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions: joyplus-cms version 1.6.0

Description: The issue allows remote attackers to obtain sensitive information via a direct request to the 'install/' or 'log/' URI.

Recommendations: For joyplus-cms version 1.6.0, restrict access to the 'install/' and 'log/' URI to minimize the risk of exploitation.

Exploitability

Fix

Impacts

Vendors

Affected products

Weakness enumeration

Related identifiers

Found an issue in the description? Have something to add? Feel free to write us 👾