cve/2006/CVE-2006-3937.md
2024-06-18 02:51:15 +02:00

688 B

CVE-2006-3937

Description

post.php in x_atrix xGuestBook 1.02 allows remote attackers to obtain sensitive information via a request without the (1) user, (2) mail, (3) p, or (4) url parameter, which reveals the installation path in an error message.

POC

Reference

Github

No PoCs found on GitHub currently.