Lucene search
+L

1 matches found

wpexploit
wpexploit
added 2021/03/26 12:00 a.m.861 views

AccessAlly < 3.5.7 - $_SERVER Superglobal Leakage

In the plugin, the file "resource/frontend/product/product-shortcode.php" responsible for the accessallyorderform shortcode is dumping serialize$SERVER, which contains all environment variables. The leakage occurs on all public facing pages containing the accessallyorderform shortcode, no login o...

5CVSS2AI score0.05404EPSS
SaveExploits2
Rows per page
Query Builder