CVE-2018-12990: Infoleak

Published Jun 30, 2018

Updated

phpwcms 1.8.9 allows remote attackers to discover the installation path via an invalid csrftokenvalue field.

Affected Software

1 affected component

Phpwcms Phpwcms=1.8.9

Event History

Jun 30, 2018

CVE Published

via MITRE·02:00 PM

Data Sourced

via MITRE·02:00 PM

Description

Frequently Asked Questions

What is CVE-2018-12990?

CVE-2018-12990 is a vulnerability in phpwcms 1.8.9 that allows remote attackers to discover the installation path.

What is the severity of CVE-2018-12990?

The severity of CVE-2018-12990 is medium, with a severity value of 5.3.

How does CVE-2018-12990 affect phpwcms?

CVE-2018-12990 affects phpwcms 1.8.9 by allowing remote attackers to discover the installation path.

Is there a fix for CVE-2018-12990?

Yes, a fix for CVE-2018-12990 is available. Please refer to the vendor's website or security advisories for details on how to apply the fix.

Are there any additional references for CVE-2018-12990?

Yes, you can find additional references for CVE-2018-12990 at the following link: [https://3xpl01tc0d3r.blogspot.com/2018/06/information-disclosure-internal-path.html](https://3xpl01tc0d3r.blogspot.com/2018/06/information-disclosure-internal-path.html)