functions/suggest.php in Banana Dance B.2.6 and earlier allows remote attackers to read arbitrary database information via a crafted request.
References
Link | Resource |
---|---|
http://www.exploit-db.com/exploits/23573 | Exploit |
https://www.htbridge.com/advisory/HTB23118 | Exploit |
Configurations
Information
Published : 2014-10-21 07:55
Updated : 2014-10-24 10:26
NVD link : CVE-2012-5243
Mitre link : CVE-2012-5243
JSON object : View
CWE
CWE-264
Permissions, Privileges, and Access Controls
Products Affected
bananadance
- banana_dance