9 lines
No EOL
473 B
Text
Executable file
9 lines
No EOL
473 B
Text
Executable file
source: http://www.securityfocus.com/bid/61578/info
|
|
|
|
SilverStripe is prone to an information-disclosure vulnerability.
|
|
|
|
An attacker can exploit this issue to gain access to sensitive information that may aid in further attacks.
|
|
|
|
SilverStripe 3.0.3 is vulnerable; other versions may also be affected.
|
|
|
|
http://<X.X.X.X:Port>/Security/LoginForm?AuthenticationMethod=MemberAuthenticator&Email=<email>&Password=<password>&BackURL=%2Fadmin%2Fpages&action_dologin=Log+in |