Annuaire Sensitive Information Disclosure Vulnerability

Annuaire (directory) is developed in PHP and maintained by LaboWeb.

Annuaire has a world readable file which contains sensitive password information. A remote attacker may obtain this information by making a specially-crafted web request for the file.


 

Privacy Statement
Copyright 2010, SecurityFocus