5

CVE-2012-2922

Exploit
The request_path function in includes/bootstrap.inc in Drupal 7.14 and earlier allows remote attackers to obtain sensitive information via the q[] parameter to index.php, which reveals the installation path in an error message.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Drupal ≫ Drupal Version <= 7.14
Drupal ≫ Drupal Version 5.0
Drupal ≫ Drupal Version 5.0 Update beta1
Drupal ≫ Drupal Version 5.0 Update beta2
Drupal ≫ Drupal Version 5.0 Update dev
Drupal ≫ Drupal Version 5.0 Update rc1
Drupal ≫ Drupal Version 5.0 Update rc2
Drupal ≫ Drupal Version 5.1
Drupal ≫ Drupal Version 5.2
Drupal ≫ Drupal Version 5.3
Drupal ≫ Drupal Version 5.4
Drupal ≫ Drupal Version 5.5
Drupal ≫ Drupal Version 5.6
Drupal ≫ Drupal Version 5.7
Drupal ≫ Drupal Version 5.8
Drupal ≫ Drupal Version 5.9
Drupal ≫ Drupal Version 5.10
Drupal ≫ Drupal Version 5.11
Drupal ≫ Drupal Version 5.12
Drupal ≫ Drupal Version 5.13
Drupal ≫ Drupal Version 5.14
Drupal ≫ Drupal Version 5.15
Drupal ≫ Drupal Version 5.16
Drupal ≫ Drupal Version 5.17
Drupal ≫ Drupal Version 5.18
Drupal ≫ Drupal Version 5.19
Drupal ≫ Drupal Version 5.20
Drupal ≫ Drupal Version 5.21
Drupal ≫ Drupal Version 5.22
Drupal ≫ Drupal Version 5.23
Drupal ≫ Drupal Version 6.0
Drupal ≫ Drupal Version 6.0 Update beta1
Drupal ≫ Drupal Version 6.0 Update beta2
Drupal ≫ Drupal Version 6.0 Update beta3
Drupal ≫ Drupal Version 6.0 Update beta4
Drupal ≫ Drupal Version 6.0 Update dev
Drupal ≫ Drupal Version 6.0 Update rc1
Drupal ≫ Drupal Version 6.0 Update rc2
Drupal ≫ Drupal Version 6.0 Update rc3
Drupal ≫ Drupal Version 6.0 Update rc4
Drupal ≫ Drupal Version 6.1
Drupal ≫ Drupal Version 6.2
Drupal ≫ Drupal Version 6.3
Drupal ≫ Drupal Version 6.4
Drupal ≫ Drupal Version 6.5
Drupal ≫ Drupal Version 6.6
Drupal ≫ Drupal Version 6.7
Drupal ≫ Drupal Version 6.8
Drupal ≫ Drupal Version 6.9
Drupal ≫ Drupal Version 6.10
Drupal ≫ Drupal Version 6.11
Drupal ≫ Drupal Version 6.12
Drupal ≫ Drupal Version 6.13
Drupal ≫ Drupal Version 6.14
Drupal ≫ Drupal Version 6.15
Drupal ≫ Drupal Version 6.16
Drupal ≫ Drupal Version 6.17
Drupal ≫ Drupal Version 6.18
Drupal ≫ Drupal Version 7.0
Drupal ≫ Drupal Version 7.0 Update alpha1
Drupal ≫ Drupal Version 7.0 Update alpha2
Drupal ≫ Drupal Version 7.0 Update alpha3
Drupal ≫ Drupal Version 7.0 Update alpha4
Drupal ≫ Drupal Version 7.0 Update alpha5
Drupal ≫ Drupal Version 7.0 Update alpha6
Drupal ≫ Drupal Version 7.0 Update alpha7
Drupal ≫ Drupal Version 7.0 Update dev
Drupal ≫ Drupal Version 7.1
Drupal ≫ Drupal Version 7.2
Drupal ≫ Drupal Version 7.3
Drupal ≫ Drupal Version 7.4
Drupal ≫ Drupal Version 7.5
Drupal ≫ Drupal Version 7.6
Drupal ≫ Drupal Version 7.7
Drupal ≫ Drupal Version 7.8
Drupal ≫ Drupal Version 7.9
Drupal ≫ Drupal Version 7.10
Drupal ≫ Drupal Version 7.11
Drupal ≫ Drupal Version 7.12
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 3.01% 0.857
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5 10 2.9
AV:N/AC:L/Au:N/C:P/I:N/A:N
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

http://www.mandriva.com/security/advisories?name=MDVSA-2013:074
http://archives.neohapsis.com/archives/bugtraq/2012-05/0052.html
http://archives.neohapsis.com/archives/bugtraq/2012-05/0053.html
Exploit
http://archives.neohapsis.com/archives/bugtraq/2012-05/0055.html
http://osvdb.org/81817
http://secunia.com/advisories/49131
Vendor Advisory
Exploit
http://www.openwall.com/lists/oss-security/2012/08/02/8
http://www.securityfocus.com/bid/53454
https://exchange.xforce.ibmcloud.com/vulnerabilities/75531