almnzm CVE-2007-3173 Information Disclosure Vulnerability

almnzm is prone to a information disclosure vulnerability. Almnzm allows remote attackers to obtain sensitive information via an activateorder request to index.php with an invalid orderid parameter, probably related to [ and ] characters.


 

Privacy Statement
Copyright 2010, SecurityFocus