CVE-2009-4254

PowerPhlogger 2.2.5 allows remote attackers to obtain sensitive information via a direct request to (1) edCss.inc.php, (2) foot.inc.php, (3)…

published December 10, 2009

CVSS
—
EPSS
1%
Percentile
64.4
In the wild
Unconfirmed
What it is

PowerPhlogger 2.2.5 allows remote attackers to obtain sensitive information via a direct request to (1) edCss.inc.php, (2) foot.inc.php, (3) get_csscolors.inc.php, (4) head.inc.php, (5) head_stuff.inc.php, (6) loglist.inc.php, and (7) pphlogger_send.inc.php in include/, which reveals the installation path in an error message.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01064 · 64.4th percentile
Published
2009-12-10T01:00Z
EPSS history
Timeline
  • 10 DEC 01:00Z
    PowerPhlogger 2.2.5 allows remote attackers to obtain sensitive information via a direct request to (1) edCss.inc.php, (2) foot.inc.php, (3)…
    cvelistv5