PT-2012-1313

Name of the Vulnerable Software and Affected Versions SilverStripe versions 2.4.x through 2.4.3 Description The issue allows remote attackers to obtain SQL queries for a page when the site is running in live mode. This is achieved by exploiting the showqueries and ajax parameters in the...

CVE-2010-4822: Exposure of Sensitive Information to an Unauthorized Actor

core/model/MySQLDatabase.php in SilverStripe 2.4.x before 2.4.4, when the site is running in "live mode," allows remote attackers to obtain the SQL queries for a page via the showqueries and ajax parameters...