medium5.0
CVE-2012-4674
PluXml before 5.1.6 allows remote attackers to obtain the installation path via the PHPSESSID.
Impact
PluXml before 5.1.6 allows remote attackers to obtain the installation path via the PHPSESSID.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Pluxml | Pluxml | through 5.1.5 |