Skip to content

CVE-2018-12604 GreenCMS 2.3.0603 allows remote attackers to obtain sensitive information via a direct request for Data/Log/year_month_day.log.

HighCVSS 7.5 EPSS 12.7% Public exploit
Published
Updated
Exploit status
Public exploit available
Sign in for asset impact Search another CVE

Description

GreenCMS 2.3.0603 allows remote attackers to obtain sensitive information via a direct request for Data/Log/year_month_day.log.

Affected products

ProductAffected versionsFixed in
njtech greencms = 2.3.0603 No fix listed

References

  • github.com exploit third-party-advisory
  • 44922 exploit third-party-advisory vdb-entry