Quicksilver Forums before 1.4.1 allows remote attackers to obtain sensitive information by causing unspecified connection errors, which reveals the database password in the resulting error message.
References
Configurations
Information
Published : 2007-10-01 13:17
Updated : 2017-07-28 18:33
NVD link : CVE-2007-5172
Mitre link : CVE-2007-5172
JSON object : View
CWE
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
Products Affected
quicksilver_forums
- quicksilver_forums