VulnerabilityModified
CVE-2012-2905
Artiphp CMS 5.5.0 Neo (r422) stores database backups with predictable names under the web root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request.
MEDIUM 5.0EPSS 3.11%
Does this matter?
Lower severity and a low EPSS score (3.11%). Track it; it rarely justifies an emergency change on its own.
Description
Artiphp CMS 5.5.0 Neo (r422) stores database backups with predictable names under the web root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request.
- CVSS 2.0
- 5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
- EPSS
- 3.11% probability · 87th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-264
- Affected
- artiphp/artiphp cms
- Source
- cve@mitre.org
References
- http://osvdb.org/81991
- http://secunia.com/advisories/49195Vendor Advisory
- http://www.exploit-db.com/exploits/18889Exploit
- http://www.zeroscience.mk/en/vulnerabilities/ZSL-2012-5091.phpExploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/75690
- http://osvdb.org/81991
- http://secunia.com/advisories/49195Vendor Advisory
- http://www.exploit-db.com/exploits/18889Exploit
- http://www.zeroscience.mk/en/vulnerabilities/ZSL-2012-5091.phpExploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/75690
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.