CVE-2018-19513: Ens Webgalamb

High severity, CVSS 7.5. EPSS: 2.1% chance of exploitation in the next 30 days.

In Webgalamb through 7.0, log files are exposed to the internet with predictable files/logs/sql_error_log/YYYY-MM-DD-sql_error_log.log filenames. The log file could contain sensitive client data (email addresses) and also facilitates exploitation of SQL injection errors.

Affected products

• Ens Webgalamb: up to and including 7.0

Published 2019-03-21. Last modified 2026-06-17.