CVE-2010-5187

Published: Aug 26, 2012Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

SilverStripe 2.3.x before 2.3.8 and 2.4.x before 2.4.1, when running on servers with certain configurations, allows remote attackers to obtain sensitive information via a direct request to PHP files in the (1) sapphire, (2) cms, or (3) mysite folders, which reveals the installation path in an error message.

Affected (14)

Products: Silverstripe: Silverstripe

Silverstripe

1 product

Silverstripe

Configuration A

14 vulnerable

Vulnerable Software	Affected Versions
Silverstripe Silverstripe	Version 2.3.0
Silverstripe Silverstripe	Version 2.3.0 rc1
Silverstripe Silverstripe	Version 2.3.0 rc2
Silverstripe Silverstripe	Version 2.3.0 rc3
Silverstripe Silverstripe	Version 2.3.1
Silverstripe Silverstripe	Version 2.3.1 rc1
Silverstripe Silverstripe	Version 2.3.1 rc2
Silverstripe Silverstripe	Version 2.3.2
Silverstripe Silverstripe	Version 2.3.3
Silverstripe Silverstripe	Version 2.3.4
Silverstripe Silverstripe	Version 2.3.5
Silverstripe Silverstripe	Version 2.3.6
Silverstripe Silverstripe	Version 2.3.7
Silverstripe Silverstripe	Version 2.4.0