Information disclosure

2008-09-1623:00:00

PRIOn knowledge base

www.prio-n.com

6.9 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

71.2%

JSON

TalkBack 2.3.6 allows remote attackers to obtain configuration information via a direct request to install/info.php, which calls the phpinfo function.

CPENameOperatorVersion
talkbackeq2.3.6

CPE	Name	Operator	Version
	talkback	eq	2.3.6

References

securityreason.com/securityalert/4267

exchange.xforce.ibmcloud.com/vulnerabilities/45103

www.exploit-db.com/exploits/6451