EDB-47343
PoCCraft CMS 2.7.9/3.2.5 - Information Disclosure
view exploit source exploit_dbtype webappsauthor Mohammed Abdul Raheempublished 2019-09-02catalog exploit_db
01
exploited CVEs (1)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2019-14280US | medium5.3 | Exploit | ||
In some circumstances, Craft 2 before 2.7.10 and 3 before 3.2.6 wasn't stripping EXIF data from user-uploaded images when it was configured to do so, potentially exposing personal/… | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan