CVE-2010-2859
25.07.2010, 02:04
news.php in SimpNews 2.47.3 and earlier allows remote attackers to obtain sensitive information via an invalid lang parameter, which reveals the installation path in an error message.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| boesch-it | simpnews | 𝑥 ≤ 2.47.03 |
| boesch-it | simpnews | 2.0.1 |
| boesch-it | simpnews | 2.13 |
| boesch-it | simpnews | 2.30 |
| boesch-it | simpnews | 2.30.2 |
| boesch-it | simpnews | 2.30.6 |
| boesch-it | simpnews | 2.31.0 |
| boesch-it | simpnews | 2.32.0 |
| boesch-it | simpnews | 2.32.1 |
| boesch-it | simpnews | 2.33.0 |
| boesch-it | simpnews | 2.33.01 |
| boesch-it | simpnews | 2.34 |
| boesch-it | simpnews | 2.34.0 |
| boesch-it | simpnews | 2.34.01 |
| boesch-it | simpnews | 2.35.00 |
| boesch-it | simpnews | 2.36.00 |
| boesch-it | simpnews | 2.37.00 |
| boesch-it | simpnews | 2.37.01 |
| boesch-it | simpnews | 2.37.02 |
| boesch-it | simpnews | 2.38 |
| boesch-it | simpnews | 2.38.02 |
| boesch-it | simpnews | 2.38.03 |
| boesch-it | simpnews | 2.38.04 |
| boesch-it | simpnews | 2.39.0 |
| boesch-it | simpnews | 2.40.01 |
| boesch-it | simpnews | 2.41.0 |
| boesch-it | simpnews | 2.41.02 |
| boesch-it | simpnews | 2.41.03 |
| boesch-it | simpnews | 2.42.0 |
| boesch-it | simpnews | 2.42.01 |
| boesch-it | simpnews | 2.44.00 |
| boesch-it | simpnews | 2.47.00 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration