CVE-2010-5188

SilverStripe CMS 2.3.x prior to 2.3.6 is affected by an information-disclosure vulnerability. The flaw stems from improper handling of debug_memory (Director.php) and debug_profile (main.php), allowing remote attackers to obtain sensitive information. Remediation: upgrade to SilverStripe 2.3.6 or...