CVE-2014-8939

Name of the Vulnerable Software and Affected Versions Lexiglot through 2014-11-20

Description The issue allows remote attackers to obtain sensitive information, specifically the full path, via a request to the "include/smarty/plugins/modifier.date format.php" endpoint if PHP has a non-recommended configuration that produces warning messages.

Recommendations For Lexiglot through 2014-11-20, consider restricting access to the "include/smarty/plugins/modifier.date format.php" endpoint until a fix is available. Additionally, review and adjust PHP configurations to avoid producing warning messages, which can help minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.