TI-2014-07889 CVE-2014-9702 · GHSA-5wrp-5m5q-9w6xsystem/classes/DbPDO.php in Cmfive through 2015-03-15, when database connectivity…Priority LOW 36system/classes/DbPDO.php in Cmfive through 2015-03-15, when database connectivity malfunctions, allows remote attackers to obtain sensitive information (username and password) via any request, such as a password reset re…CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01347 · Published 2020-06-01 · No fix listed CWE-522