Monstra CMS Information Disclosure Vulnerability (CNVD-2019-03471)

Monstra CMS is a lightweight PHP-based content management system CMS developed by Ukrainian software developer Sergey Romanenko. The system is easy to install and use, scalable and so on. An information disclosure vulnerability exists in the...

CVE-2018-16977

Monstra CMS V3.0.4 has an information leakage risk e.g., PATH, DOCUMENTROOT, and SERVERADMIN in libraries/Gelato/ErrorHandler/Resources/Views/Errors/exception.php...

CVE-2018-16977

Monstra CMS V3.0.4 has an information leakage risk e.g., PATH, DOCUMENTROOT, and SERVERADMIN in libraries/Gelato/ErrorHandler/Resources/Views/Errors/exception.php...

PT-2018-13809

Name of the Vulnerable Software and Affected Versions Monstra CMS version 3.0.4 Description The issue concerns an information leakage risk, where sensitive data such as PATH, DOCUMENT ROOT, and SERVER ADMIN may be exposed. This is related to the file...

CVE-2018-16977: Exposure of Sensitive Information to an Unauthorized Actor

Monstra CMS V3.0.4 has an information leakage risk e.g., PATH, DOCUMENTROOT, and SERVERADMIN in libraries/Gelato/ErrorHandler/Resources/Views/Errors/exception.php...

Cross site scripting

In Yii Framework 2.x before 2.0.14, remote attackers could obtain potentially sensitive information from exception messages, or exploit reflected XSS on the error handler page in non-debug mode. Related to base/ErrorHandler.php, log/Dispatcher.php, and views/errorHandler/exception.php...

PT-2018-17293

Name of the Vulnerable Software and Affected Versions: Yii Framework versions prior to 2.0.14 Description: The issue allows remote attackers to obtain potentially sensitive information from exception messages or exploit reflected XSS on the error handler page in non-debug mode. This is related to...

CVE-2017-11516

An XSS vulnerability exists in framework/views/errorHandler/exception.php in Yii Framework 2.0.12 affecting the exception screen when debug mode is enabled, because $exception-errorInfo is mishandled...

PT-2017-12064

Name of the Vulnerable Software and Affected Versions Yii Framework version 2.0.12 Description A security issue exists due to the mishandling of $exception-errorInfo in the exception screen when debug mode is enabled. This affects the framework/views/errorHandler/exception.php file. Recommendatio...

CVE-2017-11516: Improper Neutralization of Input During Web Page Generation

An XSS vulnerability exists in framework/views/errorHandler/exception.php in Yii Framework 2.0.12 affecting the exception screen when debug mode is enabled, because $exception-errorInfo is mishandled...