MEDIUM🇬🇧 English

CVE-2013-4728

CVSS 5.0v2.0pub. 2014-06-06upd. 2026-05-06

DDSN Interactive cm3 Acora CMS 6.0.6/1a, 6.0.2/1a, 5.5.7/12b, 5.5.0/1b-p1, and possibly other versions, allows remote attackers to obtain sensitive information via a .. (dot dot) in the "l" parameter, which reveals the installation path in an error message.

oryginał EN
CVSS Vector
AV:N/AC:L/Au:N/C:P/I:N/A:N

  • Ddsn Cm3 Acora Content Management System

    APP
    Ddsn
    5.5.0\/1b-p15.5.7\/12b6.0.2\/1a6.0.6\/1a
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
CWE
Referencje

Powiązane podatności

CVE-2025-22964HIGH8.1ten sam produkt

DDSN Interactive cm3 Acora CMS version 10.1.1 has an unauthenticated time-based blind SQL Injection vulnerabil...

CVE-2025-25968MEDIUM6.0ten sam produkt

DDSN Interactive cm3 Acora CMS version 10.1.1 contains an improper access control vulnerability. An editor-pri...

CVE-2013-4727MEDIUM5.0ten sam produkt

DDSN Interactive cm3 Acora CMS 6.0.6/1a, 6.0.2/1a, 5.5.7/12b, 5.5.0/1b-p1, and possibly other versions, allows...

CVE-2013-4725MEDIUM5.0ten sam produkt

DDSN Interactive cm3 Acora CMS 6.0.6/1a, 6.0.2/1a, 5.5.7/12b, 5.5.0/1b-p1, and possibly other versions, does n...

CVE-2013-4724MEDIUM5.0ten sam produkt

DDSN Interactive cm3 Acora CMS 6.0.6/1a, 6.0.2/1a, 5.5.7/12b, 5.5.0/1b-p1, and possibly other versions, does n...