Information disclosure

2008-09-2218:52:00

PRIOn knowledge base

www.prio-n.com

6.6 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

68.8%

JSON

cron.php in MemHT Portal 3.9.0 and earlier allows remote attackers to obtain sensitive information via a direct request, which reveals the installation path in an error message.

CPENameOperatorVersion
memht_portaleq3.1
memht_portalle3.9.0
memht_portaleq3.6.0
memht_portaleq3.8.5
memht_portaleq3.4
memht_portaleq3.4.5

Name	Operator	Version
memht_portal	eq	3.1
memht_portal	le	3.9.0
memht_portal	eq	3.6.0
memht_portal	eq	3.8.5
memht_portal	eq	3.4
memht_portal	eq	3.4.5

References

securityreason.com/securityalert/4288

exchange.xforce.ibmcloud.com/vulnerabilities/45413

www.exploit-db.com/exploits/6393