phpdemo/viewsource.php in Advanced Software Engineering ChartDirector 4.1 allows remote attackers to read sensitive files via the file parameter.
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
Link | Tags |
---|---|
https://exchange.xforce.ibmcloud.com/vulnerabilities/41701 | vdb entry |
https://www.exploit-db.com/exploits/5399 | exploit |
http://www.vupen.com/english/advisories/2008/1140/references | vdb entry |
http://www.securityfocus.com/bid/28674 | vdb entry exploit |