CVE-2018-19513

In Webgalamb through 7.0, log files are exposed to the internet with predictable files/logs/sql_error_log/YYYY-MM-DD-sql_error_log.log filenames

published March 17, 2019

CVSS
—
EPSS
2%
Percentile
81.8
In the wild
Unconfirmed
What it is

In Webgalamb through 7.0, log files are exposed to the internet with predictable files/logs/sql_error_log/YYYY-MM-DD-sql_error_log.log filenames. The log file could contain sensitive client data (email addresses) and also facilitates exploitation of SQL injection errors.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02124 · 81.8th percentile
Published
2019-03-17T22:02Z
EPSS history
Timeline
  • 17 MAR 22:02Z
    In Webgalamb through 7.0, log files are exposed to the internet with predictable files/logs/sql_error_log/YYYY-MM-DD-sql_error_log.log filenames
    cvelistv5