vendor:
Amiro.CMS
by:
Vladimir Vorontsov
5.5
CVSS
MEDIUM
Disclosure of ways
N/A
CWE
Product Name: Amiro.CMS
Affected Version From: Amiro CMS <= 5.4.0.0
Affected Version To: Amiro CMS <= 5.4.0.0
Patch Exists: YES
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2009
Amiro.CMS root folder disclosure
A vulnerability exists due to improper handling-line user name to log into the administrative console. When you enter your user name%%%, attacker can gain information on the full path when you install applications, as well as some of the names of internal variables. In consequence of the fact that the function quits, the administrator does not know of the compromise of the system through the module, 'History of logins.'
Mitigation:
N/A
