October 31, 2024
October 24, 2024
October 17, 2024
Join our subscribers
Installation Path Disclosure Weakness in Pluck CMS
| Advisory ID: | HTB22798 |
| Product: | Pluck |
| Vendor: | Pluck CMS |
| Vulnerable Versions: | 4.6.4 and probably prior |
| Tested Version: | 4.6.4 |
| Advisory Publication: | January 18, 2011 [without technical details] |
| Vendor Notification: | January 18, 2011 |
| Public Disclosure: | February 1, 2011 |
| Vulnerability Type: | Information Exposure Through Externally-generated Error Message [CWE-211] |
| Risk Level: | Medium |
 | |
| CVSSv2 Base Score: | 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N) |
| Solution Status: | Fixed by Vendor |
| Discovered and Provided: | High-Tech Bridge Security Research Lab |
| Advisory Details: | |
High-Tech Bridge SA Security Research Lab has discovered a weakness in Pluck CMS which could be exploited to gain access to potentially sensitive information. | |
| Solution: | |
| Upgrade to the most recent version More info available: http://www.pluck-cms.org/?file=about/release-notes | |
References: | |
| [1] High-Tech Bridge Advisory HTB22798 - https://www.immuniweb.com/advisory/HTB22798 - Installation Path Disclosure Weakness in Pluck CMS [2] Pluck CMS - pluck-cms.org - Pluck is your small and simple content management system, written in php. [3] Common Weakness Enumeration (CWE) - http://cwe.mitre.org - targeted to developers and security practitioners, CWE is a formal list of software weakness types. | |
Previous Security Advisories with CWE-211:
Have additional information to submit?
Please feel free to send us any additional information related to this Advisory, such as vulnerable versions, additional exploitation details and conditions, patches and other relevant details.
Please feel free to send us any additional information related to this Advisory, such as vulnerable versions, additional exploitation details and conditions, patches and other relevant details.
