MyABraCaDaWeb 1.0.2 and earlier allows remote attackers to obtain sensitive information via an invalid IDAdmin or other parameter, which reveals the installation path in an error message.
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
Link | Tags |
---|---|
http://www.securitytracker.com/id?1006308 | vdb entry exploit |
http://www.securityfocus.com/archive/1/315317/30/25460/threaded | mailing list |
http://www.securityfocus.com/bid/7126 | vdb entry exploit |
http://securityreason.com/securityalert/3717 | third party advisory |
https://exchange.xforce.ibmcloud.com/vulnerabilities/11556 | vdb entry |
http://secunia.com/advisories/8320 | third party advisory vendor advisory |