QwikSec

Security Database

CVE

CWE

Training

CVE-2012-3474

Published: Aug 12, 2012

Modified: Sep 17, 2024

PUBLISHED

Description

The comments API in application/libraries/api/MY_Comments_Api_Object.php in the Ushahidi Platform before 2.5 allows remote attackers to obtain sensitive information about the e-mail address, IP address, and other attributes of the author of a comment via an API function call.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

[oss-security] 20120809 Re: CVE request for Ushahidi

mailing-list

x_refsource_MLIST

https://github.com/ushahidi/Ushahidi_Web/commit/529f353

x_refsource_CONFIRM

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.