Design/Logic Flaw

2010-07-2502:04:00

PRIOn knowledge base

www.prio-n.com

6.7 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

71.4%

JSON

news.php in SimpNews 2.47.3 and earlier allows remote attackers to obtain sensitive information via an invalid lang parameter, which reveals the installation path in an error message.

CPENameOperatorVersion
simpnewseq2.42.0
simpnewseq2.13
simpnewseq2.30.6
simpnewseq2.41.0
simpnewseq2.32.1
simpnewseq2.42.01
simpnewseq2.33.01
simpnewseq2.39.0
simpnewseq2.38.03
simpnewseq2.41.03

Name	Operator	Version
simpnews	eq	2.42.0
simpnews	eq	2.13
simpnews	eq	2.30.6
simpnews	eq	2.41.0
simpnews	eq	2.32.1
simpnews	eq	2.42.01
simpnews	eq	2.33.01
simpnews	eq	2.39.0
simpnews	eq	2.38.03
simpnews	eq	2.41.03