Vulnerability Database
296,172
Total vulnerabilities in the database
silverstripe/framework's install.php script discloses sensitive data by pre-populating DB credential forms
When accessing the install.php script it is possible to extract any pre-configured database or default admin account password by viewing the source of the page, and inspecting the value property of the password fields.
| Software | From | Fixed in |
|---|---|---|
silverstripe / framework
|
4.0.0-rc1 | 4.0.1 |