|
Gossamer Threads DBMan Information Leakage Vulnerability
Requesting an invalid database file from a web server implementing Gossamer Threads DBMan scripts will return a CGI error message containing environmental variables to a remote user without any authorization. The parameters displayed include the local document root path, server administrator account name, web server software, platform, etc. |
|
|
Privacy Statement |
