Code injection

2012-08-3120:55:00

PRIOn knowledge base

www.prio-n.com

6.7 Medium

AI Score

Confidence

Low

0.007 Low

EPSS

Percentile

80.1%

JSON

The Advertisement module 6.x-2.x before 6.x-2.3 for Drupal does not properly restrict access to debug information, which allows remote attackers to obtain sensitive site configuration information that is specified by the $conf variable in settings.php.

CPENameOperatorVersion
advertisementeq6.x-2.0 beta1
advertisementeq6.x-2.0 beta2
advertisementeq6.x-2.0 beta5
advertisementeq6.x-2.0 alpha1
advertisementeq6.x-2.0 beta3
advertisementeq6.120.20
advertisementeq6.x-2.0 beta6
advertisementeq6.x-2.0 alpha2
advertisementeq6.x-2.0 beta4
advertisementeq6.0.0-x2.0-rc1

Name	Operator	Version
advertisement	eq	6.x-2.0 beta1
advertisement	eq	6.x-2.0 beta2
advertisement	eq	6.x-2.0 beta5
advertisement	eq	6.x-2.0 alpha1
advertisement	eq	6.x-2.0 beta3
advertisement	eq	6.120.20
advertisement	eq	6.x-2.0 beta6
advertisement	eq	6.x-2.0 alpha2
advertisement	eq	6.x-2.0 beta4
advertisement	eq	6.0.0-x2.0-rc1