PILOS 安全漏洞

PILOS is an open source front-end software from THM. A security vulnerability exists in PILOS versions prior to 4.8.0, which stems from exposing PHP version information that could lead to server fingerprinting and information disclosure...

CVE-2021-26595

In Directus 8.x through 8.8.1, an attacker can learn sensitive information such as the version of the CMS, the PHP version used by the site, and the name of the DBMS, simply by view the result of the api-aa, called automatically upon a connection. NOTE: This vulnerability only affects products th...