Medium severity5.3NVD Advisory· Published Jun 1, 2020· Updated Jun 17, 2026
CVE-2014-8939
CVE-2014-8939
Description
Lexiglot through 2014-11-20 allows remote attackers to obtain sensitive information (full path) via an include/smarty/plugins/modifier.date_format.php request if PHP has a non-recommended configuration that produces warning messages.
Affected products
2- Lexiglot/Lexiglotdescription
Patches
Vulnerability mechanics
References
1- www.justanotherhacker.com/2018/05/jahx181_-_piwigo_lexiglot_multiple_vulnerabilities.htmlnvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.