| Package | Affected versions | Patched versions |
|---|---|---|
| easynews | ≤ 1.5 |
easyScripts easyNews 1.5 allows remote attackers to obtain the full path of the web root via a view request with a non-integer news message id field, which leaks the path in a PHP error message when the script times out.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free