CVE-2010-5187
Last modified
CVE-2010-5187 is a vulnerability of currently unknown severity. SilverStripe 2.3.x before 2.3.8 and 2.4.x before 2.4.1, when running on servers with certain configurations, allows remote attackers to obtain sensitive information via a direct request to PHP files in the (1) sapphire, (2) cms, or (3) mysite folders, which reveals the installation path in an error message.. EPSS estimates a 1.20% chance of exploitation in the next 30 days.
Description
SilverStripe 2.3.x before 2.3.8 and 2.4.x before 2.4.1, when running on servers with certain configurations, allows remote attackers to obtain sensitive information via a direct request to PHP files in the (1) sapphire, (2) cms, or (3) mysite folders, which reveals the installation path in an error message.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Silverstripe | Silverstripe | 2.3.0 |
| Silverstripe | Silverstripe | 2.3.1 |
| Silverstripe | Silverstripe | 2.3.2 |
| Silverstripe | Silverstripe | 2.3.3 |
| Silverstripe | Silverstripe | 2.3.4 |
| Silverstripe | Silverstripe | 2.3.5 |
| Silverstripe | Silverstripe | 2.3.6 |
| Silverstripe | Silverstripe | 2.3.7 |
| Silverstripe | Silverstripe | 2.4.0 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2010-5187?
How severe is CVE-2010-5187?
How do I fix CVE-2010-5187?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2010
- CVE-2010-5181Race condition in VIPRE Antivirus Premium 4.0.3272 on Window…7
- CVE-2010-5182Race condition in VirusBuster Internet Security Suite 3.2 on…
- CVE-2010-5183Race condition in Webroot Internet Security Essentials 6.1.0…
- CVE-2010-5184Race condition in ZoneAlarm Extreme Security 9.1.507.000 on …
- CVE-2010-5185The Antivirus component in Comodo Internet Security before 5…
- CVE-2010-5186The Antivirus component in Comodo Internet Security before 4…
- CVE-2010-5188SilverStripe 2.3.x before 2.3.6 allows remote attackers to o…
- CVE-2010-5189Blue Coat ProxySG before SGOS 4.3.4.1, 5.x before SGOS 5.4.5…
- CVE-2010-5190The Active Content Transformation functionality in Blue Coat…
- CVE-2010-5191Multiple cross-site request forgery (CSRF) vulnerabilities o…
- CVE-2010-5192Cross-site scripting (XSS) vulnerability in the Java Managem…
- CVE-2010-5193Stack-based buffer overflow in the TIFMergeMultiFiles functi…
Are you affected by CVE-2010-5187?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST