CVE-2010-4401

languages.inc.php in DynPG CMS 4.2.0 allows remote attackers to obtain sensitive information via a direct request, which reveals the installation path in an error message...

CVE-2010-4401

DynPG CMS 4.2.0 is vulnerable via languages.inc.php, where direct requests disclose the installation path due to improper error handling. Exploitation details appear in public advisories; remediation is to apply the DynPG 4.2.1 security update. Other vulnerabilities in DynPG are noted in consolid...

CVE-2010-4401: Exposure of Sensitive Information to an Unauthorized Actor

languages.inc.php in DynPG CMS 4.2.0 allows remote attackers to obtain sensitive information via a direct request, which reveals the installation path in an error message...

PT-2010-5475

Name of the Vulnerable Software and Affected Versions DynPG CMS versions 4.1.1 through 4.2.0 Description The issue allows remote attackers to read arbitrary files due to a directory traversal vulnerability in the languages.inc.php file when magic quotes gpc is disabled. This can be exploited by...

PT-2010-5477

Name of the Vulnerable Software and Affected Versions DynPG CMS version 4.2.0 Description The issue allows remote attackers to obtain sensitive information via a direct request to languages.inc.php, which reveals the installation path in an error message. Recommendations For DynPG CMS version...

CVE-2010-4399: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in languages.inc.php in DynPG CMS 4.1.1 and 4.2.0, when magicquotesgpc is disabled, allows remote attackers to read arbitrary files via a .. dot dot in the CHGDYNPGSETLANGUAGE parameter to index.php. NOTE: some of these details are obtained from third party...