CVE-2020-35388

rainrocka xinhu 2.1.9 allows remote attackers to obtain sensitive information via an index.php?a=gettotal request in which the ajaxbool value is manipulated to…

published December 26, 2020

CVSS
—
EPSS
1%
Percentile
73.9
In the wild
Unconfirmed
What it is

rainrocka xinhu 2.1.9 allows remote attackers to obtain sensitive information via an index.php?a=gettotal request in which the ajaxbool value is manipulated to be true.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01489 · 73.9th percentile
Published
2020-12-26T02:38Z
EPSS history
Timeline
  • 26 DEC 02:38Z
    rainrocka xinhu 2.1.9 allows remote attackers to obtain sensitive information via an index.php?a=gettotal request in which the ajaxbool value is manipulated to…
    cvelistv5