Description
core/model/MySQLDatabase.php in SilverStripe 2.4.x before 2.4.4, when the site is running in "live mode," allows remote attackers to obtain the SQL queries for a page via the showqueries and ajax parameters.
Remediation
References
Related Vulnerabilities
WordPress Plugin Photospace Gallery Cross-Site Scripting (2.3.5)
WordPress Plugin Border Loading Bar Multiple Cross-Site Scripting Vulnerabilities (1.0)
PostgreSQL Other Vulnerability (CVE-2006-5542)
Moodle Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2022-45149)
SharePoint Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-2816)