Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
SilverStripe 2.3.x before 2.3.8 and 2.4.x before 2.4.1, when running on servers with certain configurations, allows remote attackers to obtain sensitive information via a direct request to PHP files in the (1) sapphire, (2) cms, or (3) mysite folders, which reveals the installation path in an error message.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
SilverStripe 安全漏洞
Vulnerability Description
SilverStripe CMS是新西兰SilverStripe公司的一套开源的编程框架和内容管理系统 (CMS)。该系统具有支持多国语言、跨平台等特点。 SilverStripe 2.3.8之前的2.3.x版本、2.4.1之前的2.4.x版本中存在漏洞。当某些配置运行在服务器上时，远程攻击者可利用该漏洞通过传递到(1)sapphire(2)cms或(3)mysite揭示安装路径的错误信息文件夹中的PHP文件的直接请求，获取敏感信息。
CVSS Information
N/A
Vulnerability Type
N/A