PT-2024-31268

Name of the Vulnerable Software and Affected Versions ZZCMS versions 2023 and earlier Description A sensitive information disclosure issue exists in the eginfo.php file, located at /3/E bak5.1/upload/. When accessed with the query parameter phome=ShowPHPInfo, the application executes the phpinfo...

CVE-2024-44820

A sensitive information disclosure vulnerability exists in ZZCMS v.2023 and before . The issue is located in the eginfo.php file at the path /3/E_bak5.1/upload/. When an attacker accesses this file using the query parameter phome=ShowPHPInfo , the application executes the phpinfo() function. This...

CVE-2024-44820: Improper Neutralization of Input During Web Page Generation

A sensitive information disclosure vulnerability exists in ZZCMS v.2023 and before within the eginfo.php file located at /3/Ebak5.1/upload/. When accessed with the query parameter phome=ShowPHPInfo, the application executes the phpinfo function, which exposes detailed information about the PHP...

Mars: phpinfo() exposed on ██████████

A phpinfo page was exposed at the URL ███████. This configuration issue allowed sensitive system information to be publicly accessed...

CVE-2024-7328

A vulnerability, which was classified as problematic, has been found in YouDianCMS 7. This issue affects some unknown processing of the file /t.php?action=phpinfo. The manipulation leads to information disclosure. The attack may be initiated remotely. The exploit has been disclosed to the public...

YouDianCMS 信息泄露漏洞

YouDianCMS YouDian CMS is a website builder from China YouDian Company. An information disclosure vulnerability exists in YouDianCMS version 7, which originates from an unknown handling of the file /t.php?action=phpinfo that can lead to information disclosure...

PT-2024-38270 · Unknown · Youdiancms

Name of the Vulnerable Software and Affected Versions: YouDianCMS version 7 Description: A problematic issue has been found in the processing of the file "/t.php?action=phpinfo", leading to information disclosure. The attack can be initiated remotely. The vendor was contacted about this disclosur...

CVE-2024-7328: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability, which was classified as problematic, has been found in YouDianCMS 7. This issue affects some unknown processing of the file /t.php?action=phpinfo. The manipulation leads to information disclosure. The attack may be initiated remotely. The exploit has been disclosed to the public...

MTN Group: Unauthenticated phpinfo()files could lead to ability file read at h2f54.n1.ips.mtn.co.ug [/dashboard/]

The phpinfo files at h2f54.n1.ips.mtn.co.ug were left unauthenticated, potentially allowing remote attackers to obtain sensitive information about the web server configuration...

CVE-2024-35776

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Exeebit phpinfo WP.This issue affects phpinfo WP: from n/a through 5.0...

CVE-2024-35776

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Exeebit phpinfo WP.This issue affects phpinfo WP: from n/a through 5.0...

CVE-2024-35776 WordPress phpinfo() WP plugin <= 5.0 - Unauthenticated Data Exposure vulnerability

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Exeebit phpinfo WP.This issue affects phpinfo WP: from n/a through 5.0...

CVE-2024-35776

CVE-2024-35776 describes an Unauthenticated Information Exposure in the phpinfo() WP plugin, exposing sensitive data to unauthorized actors. Affected: phpinfo() WP from unknown/n/a up to version 5.0. Public docs in the connected set reiterate this description; no concrete exploit details or remed...

WordPress plugin phpinfo WP Information Disclosure Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An information...

CVE-2024-35776: Exposure of Sensitive Information to an Unauthorized Actor

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Exeebit phpinfo WP.This issue affects phpinfo WP: from n/a through 5.0...

PT-2024-26731

Name of the Vulnerable Software and Affected Versions Exeebit phpinfo WP versions n/a through 5.0 Description The issue is related to the exposure of sensitive information to an unauthorized actor. This is a problem where sensitive data is made available to individuals who should not have access ...

WordPress phpinfo() WP plugin <= 5.0 - Unauthenticated Data Exposure vulnerability

Unauthenticated Data Exposure vulnerability discovered by LuxF0z Patchstack Alliance in WordPress Plugin phpinfo WP versions = 5.0...

WordPress phpinfo() WP Plugin <= 5.0 is vulnerable to Sensitive Data Exposure

Software phpinfo WP Type Plugin Vulnerable versions = 5.0 Fixed in 6.0 OWASP Top 10 A5: Security Misconfiguration Classification Sensitive Data Exposure CVE CVE-2024-35776 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID fed75fba8383 Credits LuxF0z Required privilege...

SimpleSAMLphp Information Disclosure vulnerability

Background SimpleSAMLphp 1.17 includes a preview of the new user interface to be included in the future version 2.0. This new user interface can be enabled by setting the usenewui configuration option to true, and it includes a new admin interface in a module called admin, which can be disabled...

GHSA-PPM4-R2VC-PG74 SimpleSAMLphp Information Disclosure vulnerability

Background SimpleSAMLphp 1.17 includes a preview of the new user interface to be included in the future version 2.0. This new user interface can be enabled by setting the usenewui configuration option to true, and it includes a new admin interface in a module called admin, which can be disabled...