CVE-2015-5959 Froxlor before 0.9.33.2 with the default configuration/setup might allow remote attackers to obtain the database password by reading /logs/sql-error.log.
CriticalCVSS 9.8
EPSS 3.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Froxlor before 0.9.33.2 with the default configuration/setup might allow remote attackers to obtain the database password by reading /logs/sql-error.log.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| froxlor | <= 0.9.33.1 | No fix listed |
References
- [oss-security] 20150807 Re: CVE request: Froxlor - information leak mailing-list
- 76097 third-party-advisory vdb-entry
- github.com patch third-party-advisory