| Package | Affected versions | Patched versions |
|---|---|---|
| amiro.cms | = 4.0.8.0= 4.2.0.5= 4.2.1.0= 4.2.2.0= 4.2.3.0= 4.2.4= 4.2.5= 5.0.7= 5.2= 5.2.2= 5.2.3≤ 5.4.0.0 |
Amiro.CMS 5.4.0.0 and earlier allows remote attackers to obtain sensitive information via an invalid loginname ("%%%") to _admin/index.php, which reveals the installation path and other information in an error message.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free