What’s Vulnerable › Vulnerabilities

CVE-2015-5959

• Severity: critical (CVSS 9.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 3.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-09-06 · updated 2026-06-17
• Weakness: CWE-200

Description

Froxlor before 0.9.33.2 with the default configuration/setup might allow remote attackers to obtain the database password by reading /logs/sql-error.log.

Affected products

• froxlor: through 0.9.33.1

References

• http://www.openwall.com/lists/oss-security/2015/08/07/2
• http://www.securityfocus.com/bid/76097
• https://github.com/Froxlor/Froxlor/commit/8558533a9148a2a0302c9c177abff8e4e4075b92
• http://www.openwall.com/lists/oss-security/2015/08/07/2
• http://www.securityfocus.com/bid/76097
• https://github.com/Froxlor/Froxlor/commit/8558533a9148a2a0302c9c177abff8e4e4075b92

Get alerted when CVE-2015-5959 or the next vulnerability affects your stack