TalkBack 2.3.6 allows remote attackers to obtain configuration information via a direct request to install/info.php, which calls the phpinfo function.
References
Configurations
Information
Published : 2008-09-16 16:00
Updated : 2017-09-28 18:32
NVD link : CVE-2008-4115
Mitre link : CVE-2008-4115
JSON object : View
CWE
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
Products Affected
talkback
- talkback