CVE-2018-19513 - In Webgalamb through 7.0, log files are exposed to the internet with predictable files/logs/sql_error_log/YYYY-MM-DD-sql_error_log.log filenames

Back Back to CVE browser

HIGH

In Webgalamb through 7.0, log files are exposed to the internet with predictable files/logs/sql_error_log/YYYY-MM-DD-sql_error_log.log filenames

Published Mar 17, 2019

7.5

HIGH

CVSS 3.0

EPSS 2.12%

Description

In Webgalamb through 7.0, log files are exposed to the internet with predictable files/logs/sql_error_log/YYYY-MM-DD-sql_error_log.log filenames. The log file could contain sensitive client data (email addresses) and also facilitates exploitation of SQL injection errors.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-532

References (2)

http://packetstormsecurity.com/files/151017/Webgalamb-Information-Disclosure-XSS-CSRF-SQL-Injection.html
x_refsource_MISCExploitThird Party AdvisoryVDB Entry
http://seclists.org/fulldisclosure/2019/Jan/15
x_refsource_MISCExploitMailing ListThird Party Advisory

Link	Providers	Tags
http://packetstormsecurity.com/files/151017/Webgalamb-Information-Disclosure-XSS-CSRF-SQL-Injection.html		x_refsource_MISCExploitThird Party AdvisoryVDB Entry
http://seclists.org/fulldisclosure/2019/Jan/15		x_refsource_MISCExploitMailing ListThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Mar 17, 2019

Updated Aug 5, 2024

Reserved Nov 23, 2018

Link CVE-2018-19513

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2018-19513

Red Hat

Severity n/a

Public date n/a

Links CVE-2018-19513