Gossamer Threads DBMan Information Leakage Vulnerability

Requesting an invalid database file from a web server implementing Gossamer Threads DBMan scripts will return a CGI error message containing environmental variables to a remote user without any authorization. The parameters displayed include the local document root path, server administrator account name, web server software, platform, etc.


 

Privacy Statement
Copyright 2010, SecurityFocus