CVE Catalog
CVE-2015-5959
CriticalSummary
Froxlor before 0.9.33.2 with the default configuration/setup might allow remote attackers to obtain the database password by reading /logs/sql-error.log.
Risk Assessment
Attackers may gain access to sensitive data, potentially leading to further attacks on the system or database.
Recommendation
It is recommended to update Froxlor to version 0.9.33.2 or later and secure access to log files.
Original NVD description (English source)
Froxlor before 0.9.33.2 with the default configuration/setup might allow remote attackers to obtain the database password by reading /logs/sql-error.log.