CVE-2010-5188

🗓️ 26 Aug 2012 18:00:00Reported by mitreType

cve

cve🔗 web.nvd.nist.gov👁 38 Views🌐 WEB

SilverStripe 2.3.x before 2.3.6 allows remote attackers to obtain sensitive information

Reporter	Title	Published	Views	Family All 6
Tenable Nessus	SilverStripe < 2.3.6 Multiple Vulnerabilities	25 Feb 201000:00	–	nessus
Tenable Nessus	SilverStripe debug_profile Parameter Information Disclosure	1 Mar 201000:00	–	nessus
Cvelist	CVE-2010-5188	26 Aug 201218:00	–	cvelist
EUVD	EUVD-2010-5147	7 Oct 202500:30	–	euvd
NVD	CVE-2010-5188	26 Aug 201218:55	–	nvd
Prion	Design/Logic Flaw	26 Aug 201218:55	–	prion

NVD

Node

silverstripe silverstripeMatch2.3.0

OR

silverstripe silverstripeMatch2.3.0rc1

OR

silverstripe silverstripeMatch2.3.0rc2

OR

silverstripe silverstripeMatch2.3.0rc3

OR

silverstripe silverstripeMatch2.3.1

OR

silverstripe silverstripeMatch2.3.1rc1

OR

silverstripe silverstripeMatch2.3.1rc2

OR

silverstripe silverstripeMatch2.3.2

OR

silverstripe silverstripeMatch2.3.3

OR

silverstripe silverstripeMatch2.3.4

OR

silverstripe silverstripeMatch2.3.5

Source	Link
secunia	www.secunia.com/advisories/38697
groups	www.groups.google.com/group/silverstripe-announce/browse_thread/thread/c75fbd7926ed2725
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/56546
openwall	www.openwall.com/lists/oss-security/2012/05/01/3
osvdb	www.osvdb.org/62541
open	www.open.silverstripe.org/changeset/98229
doc	www.doc.silverstripe.org/sapphire/en/trunk/changelogs//2.3.6
securityfocus	www.securityfocus.com/bid/38394
open	www.open.silverstripe.org/changeset/98230

Parameter	Position	Path	Description	CWE
debug_memory	query param	core/control/Director.php	Exposure of sensitive information via debug_memory parameter	CWE-200
debug_profile	query param	main.php	Exposure of sensitive information via debug_profile parameter	CWE-200

29 Apr 2026 01:13Current

6.4Medium risk

Vulners AI Score6.4

CVSS 25

EPSS0.00727

silverstripe cve-2010-5188 remote attackers sensitive information security vulnerability