220 matches found
FacturaScripts - Unauthenticated phpinfo Disclosure
Detected FacturaScripts exposes a debug branch in the Installer controller that calls phpinfo when the request carries the phpinfo=TRUE query parameter, and on an instance that has not finished installation, this endpoint was reachable without authentication. id: CVE-2026-42878 info: name:...
5.3CVSS5.9AI score0.00552EPSS
SaveExploits0References3
20