Design/Logic Flaw

2015-03-0420:59:00

PRIOn knowledge base

www.prio-n.com

7.2 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

71.1%

DLGuard 4.5 allows remote attackers to obtain the installation path via the c parameter to index.php.

CPENameOperatorVersion
dlguardeq4.5

CPE	Name	Operator	Version
	dlguard	eq	4.5

References

seclists.org/fulldisclosure/2015/Feb/67

tetraph.com/security/full-path-disclosure-vulnerability/dlguard-full-path-disclosure-information-leakage-security-vulnerabilities/

www.securityfocus.com/bid/72685