Design/Logic Flaw

SilverStripe 2.3.x before 2.3.6 allows remote attackers to obtain sensitive information via the 1 debugmemory parameter to core/control/Director.php or 2 debugprofile parameter to main.php...

SilverStripe debug_profile Parameter Information Disclosure

The SilverStripe CMS install hosted on the remote web server is affected by an information disclosure vulnerability because it fails to properly handle the 'debugprofile' parameter of the 'sapphire/main.php' script when running in live mode. An attacker, exploiting this flaw, can gain sensitive...

SilverStripe < 2.3.6 Multiple Vulnerabilities

Binary data 5345.prm...