CVE-2007-3434

2007-06-2700:00:00

mitre

www.cve.org

AI Score

6.1

Confidence

Low

EPSS

0.01

Percentile

84.0%

JSON

index.php in Pharmacy System 2 and earlier allows remote attackers to obtain sensitive information via a ’ (quote) character in the page parameter, which reveals the table prefix in an error message.

References

osvdb.org/37578

secunia.com/advisories/25792/

www.vupen.com/english/advisories/2007/2308

exchange.xforce.ibmcloud.com/vulnerabilities/35158

www.exploit-db.com/exploits/4095