Description
system/classes/DbPDO.php in Cmfive through 2015-03-15, when database connectivity malfunctions, allows remote attackers to obtain sensitive information (username and password) via any request, such as a password reset request.
Unscored
CVE-2014-9702
EUVD-2014-9510GHSA-5wrp-5m5q-9w6x
system/classes/DbPDO.php in Cmfive through 2015-03-15, when database connectivity malfunctions, allows remote attackers to obtain sensitive…
Published Jun 1, 2020 · Updated Aug 6, 2024 · Assigned by mitre