24 Dec 2018

CVE-2007-3290

9.3 Critical Severity

categoria.php in LiveCMS 3.4 and earlier allows remote attackers to obtain sensitive information via a ' (quote) character in the cid parameter, which reveals the path in a forced SQL error message.

suggest your own:

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Apps (0)

Operating Systems (0)

xtranslations

xdetection

xremediation

Comments (0)