CVE-2010-5094

The deleteinstallfiles function in control/ContentController.php in SilverStripe 2.3.x before 2.3.7 does not require ADMIN permissions, which allows remote…

published August 26, 2012

CVSS
—
EPSS
2%
Percentile
77.5
In the wild
Unconfirmed
What it is

The deleteinstallfiles function in control/ContentController.php in SilverStripe 2.3.x before 2.3.7 does not require ADMIN permissions, which allows remote attackers to delete index.php and "disrupt mod_rewrite-less URL routing."

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01735 · 77.5th percentile
Published
2012-08-26T18:00Z
EPSS history
Timeline
  • 26 AUG 18:00Z
    The deleteinstallfiles function in control/ContentController.php in SilverStripe 2.3.x before 2.3.7 does not require ADMIN permissions, which allows remote…
    cvelistv5