Path Disclosure Vulnerability in PluXml by PluXml Team
CVE-2012-4674

Currently unrated

Key Information:

Vendor

Pluxml

Status
Pluxml
Vendor
CVE Published:
26 August 2012

What is CVE-2012-4674?

PluXml versions before 5.1.6 contain a vulnerability that allows remote attackers to exploit PHP sessions to reveal the installation path of the application. This exposure can lead to further attacks, as attackers may utilize the information to target specific files or components of the application. Users are strongly advised to update to the latest version to mitigate this risk.

References

http://www.pluxml.org/article59/sortie-de-pluxml-5-1-6
x_refsource_CONFIRM
http://telechargements.pluxml.org/changelog
x_refsource_CONFIRM

Timeline

  • Vulnerability Reserved

  • Vulnerability published

JSON
.