CVE-2020-18647 – Information Disclosure in NoneCMS v1.3 allows remote attackers to obtain

Information Disclosure in NoneCMS v1.3 allows remote attackers to obtain sensitive information via the component “/nonecms/vendor”.

 

Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-18647

Reference (s):

• https://github.com/PearlyNautilus/Security-Code-Review/issues/5