functions/suggest.php in Banana Dance B.2.6 and earlier allows remote attackers to read arbitrary database information via a crafted request.
Weaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.
Link | Tags |
---|---|
http://www.exploit-db.com/exploits/23573 | exploit |
https://www.htbridge.com/advisory/HTB23118 | exploit |