CVE-2012-2704

Published: Aug 31, 2012Modified: Apr 29, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

The Advertisement module 6.x-2.x before 6.x-2.3 for Drupal does not properly restrict access to debug information, which allows remote attackers to obtain sensitive site configuration information that is specified by the $conf variable in settings.php.

Affected (18)

Products: John Franklin: Advertisement

John Franklin

1 product

Configuration A

18 vulnerable · 1 platform

Vulnerable Software	Affected Versions
John Franklin Advertisement	Version 6.x-2.0-rc1
John Franklin Advertisement	Version 6.x-2.0
John Franklin Advertisement	Version 6.x-2.0 alpha1
John Franklin Advertisement	Version 6.x-2.0 alpha2
John Franklin Advertisement	Version 6.x-2.0 beta1
John Franklin Advertisement	Version 6.x-2.0 beta2
John Franklin Advertisement	Version 6.x-2.0 beta3
John Franklin Advertisement	Version 6.x-2.0 beta4
John Franklin Advertisement	Version 6.x-2.0 beta5
John Franklin Advertisement	Version 6.x-2.0 beta6
John Franklin Advertisement	Version 6.x-2.1
John Franklin Advertisement	Version 6.x-2.1 rc1
John Franklin Advertisement	Version 6.x-2.2
John Franklin Advertisement	Version 6.x-2.2 rc1
John Franklin Advertisement	Version 6.x-2.3 beta1
John Franklin Advertisement	Version 6.x-2.3 dev
John Franklin Advertisement	Version 6.x-2.x
John Franklin Advertisement	Version 6.x-2.x dev