CVE-2015-2209

CVE-2015-2209

EPSS 1.4%

DLGuard 4.5 allows remote attackers to obtain the installation path via the c parameter to index.php.

Productos afectados

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →

Referencias

http://seclists.org/fulldisclosure/2015/Feb/67 http://tetraph.com/security/full-path-disclosure-vulnerability/dlguard-full-path-disclosure-information-leakage-security-vulnerabilities/http://www.securityfocus.com/bid/72685