CVE-2018-20566

2022-10-0316:22:05

mitre

www.cve.org

douco douphp

full path disclosure

smarty error

5.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

42.4%

JSON

An issue was discovered in DouCo DouPHP 1.5 20181221. It allows full path disclosure in “Smarty error: unable to read resource” error messages for a crafted installation page.

References

github.com/AvaterXXX/CVEs/blob/master/DouPHP.md#information-disclosure