High severity7.5NVD Advisory· Published Apr 19, 2022· Updated Jun 17, 2026
CVE-2022-27055
CVE-2022-27055
Description
ecjia-daojia 1.38.1-20210202629 is vulnerable to information leakage via content/apps/installer/classes/Helper.php. When the web program is installed, a new environment file is created, and the database information is recorded, including the database record password. NOTE: the vendor disputes this because the environment file is in the data directory, which is not intended for access by website visitors (only the statics directory can be accessed by website visitors)
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- ecjia-daojia/ecjia-daojiadescription
- Range: 1.38.1-20210202629
Patches
Vulnerability mechanics
References
3- github.com/ecjia/ecjia-daojia/blob/dfb322387e8d3d50719e44d23d793072616ff789/content/apps/installer/classes/Controllers/IndexController.phpnvdExploitThird Party Advisory
- github.com/ecjia/ecjia-daojia/blob/dfb322387e8d3d50719e44d23d793072616ff789/content/apps/installer/classes/Helper.phpnvdExploitThird Party Advisory
- github.com/ecjia/ecjia-daojia/issues/20nvdThird Party Advisory
News mentions
0No linked articles in our index yet.