Neocrome Seditio build 161 allows remote attackers to obtain sensitive information via a direct request to (1) docs/new/seditio-createnew-160.sql, (2) docs/upgrade/sedito_convert_to_utf8.optional.sql, or (3) system/install/install.parser.sql.
References
Configurations
History
21 Nov 2024, 01:45
Type | Values Removed | Values Added |
---|---|---|
References | () http://packetstormsecurity.org/files/111320/Seditio-Build-161-Cross-Site-Scripting-Information-Disclosure.html - Exploit | |
References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/74464 - |
Information
Published : 2012-11-17 21:55
Updated : 2025-04-11 00:51
NVD link : CVE-2012-5916
Mitre link : CVE-2012-5916
CVE.ORG link : CVE-2012-5916
JSON object : View
Products Affected
neocrome
- seditio
CWE
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor