An unauthenticated information disclosure vulnerability in phpUploader allows remote attackers to exfiltrate sensitive user data and system fingerprints.

The application contains an unauthenticated information disclosure flaw where the index model executes an unbounded SELECT query. This data is then embedded directly into an inline script block, allowing remote, unauthenticated attackers to access sensitive information such as uploader IP addresses, internal filenames, and cryptographic hashes.

With a CVSS score of 7.5, this vulnerability represents a significant risk to user privacy and system security. The exposure of Argon2ID hashes and internal file paths provides attackers with the necessary intelligence to conduct further targeted attacks, such as credential cracking or lateral movement, potentially leading to a total breach of the application environment.

Immediate Action: Update the phpUploader installation to version 2.0.2 or later to correct the insecure database query handling.

Proactive Monitoring: Audit access logs for unusual requests to index pages and monitor for unauthorized attempts to scrape or access sensitive configuration data.

Compensating Controls: Deploy a Web Application Firewall (WAF) to block unauthorized access to sensitive application endpoints and sanitize inbound requests that might trigger database leaks.

Public Exploit Available: true

The exposure of sensitive cryptographic hashes and internal system details poses an unacceptable risk. Administrators must apply the version 2.0.2 patch immediately to prevent the leakage of sensitive user and system information.