Vulnerability Details CVE-2014-8939
                Lexiglot through 2014-11-20 allows remote attackers to obtain sensitive information (full path) via an include/smarty/plugins/modifier.date_format.php request if PHP has a non-recommended configuration that produces warning messages.
                
                    Exploit prediction scoring system (EPSS) score
                    
                        
                            EPSS Score 0.002
                        
                    
                    
                        
                            EPSS Ranking 42.3%
                        
                    
                 
                
                    CVSS Severity
                    
                        
                            CVSS v3 Score 5.3
                        
                    
                    
                        
                            CVSS v2 Score 4.3
                        
                    
                 
                
                
                
                    
                
                
                    
                        Products affected by CVE-2014-8939
                        
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:a:piwigo:lexiglot:-
                                         
 
- 
                                    
                                    
                                        
                                            cpe:2.3:a:piwigo:lexiglot:2014-11-04
                                         
 
- 
                                    
                                    
                                        
                                            cpe:2.3:a:piwigo:lexiglot:2014-11-06
                                         
 
- 
                                    
                                    
                                        
                                            cpe:2.3:a:piwigo:lexiglot:2014-11-07
                                         
 
- 
                                    
                                    
                                        
                                            cpe:2.3:a:piwigo:lexiglot:2014-11-08
                                         
 
- 
                                    
                                    
                                        
                                            cpe:2.3:a:piwigo:lexiglot:2014-11-10