GF-3XPLORER 2.4 allows remote attackers to obtain configuration information via a direct request to explorer/phpinfo.php, which calls the phpinfo function.
References
Link | Resource |
---|---|
http://secunia.com/advisories/28164 | Patch Vendor Advisory |
https://exchange.xforce.ibmcloud.com/vulnerabilities/39127 | |
https://www.exploit-db.com/exploits/4738 |
Configurations
History
No history.
Information
Published : 2007-12-20 20:46
Updated : 2024-02-28 11:01
NVD link : CVE-2007-6476
Mitre link : CVE-2007-6476
CVE.ORG link : CVE-2007-6476
JSON object : View
Products Affected
gf_3xplorer
- gf_3xplorer
CWE
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor