Information disclosure

Almnzm allows remote attackers to obtain sensitive information via an activateorder request to index.php with an invalid orderid parameter, probably related to '' and '' characters...

CVE-2007-3173

Almnzm allows remote attackers to obtain sensitive information via an activateorder request to index.php with an invalid orderid parameter, probably related to '' and '' characters...

CVE-2007-3173

CVE-2007-3173 describes an information-disclosure flaw: remote attackers can obtain sensitive data via an activateorder request to index.php using an invalid orderid parameter, with likely involvement of ‘[]’ characters. The root cause is improper handling of the orderid parameter, enabling parti...

CVE-2007-3173

Almnzm allows remote attackers to obtain sensitive information via an activateorder request to index.php with an invalid orderid parameter, probably related to '' and '' characters...

CVE-2007-3173: Undefined Security Weakness

Almnzm allows remote attackers to obtain sensitive information via an activateorder request to index.php with an invalid orderid parameter, probably related to '' and '' characters...

Full Path Disclosure in Almnzm

Hello Vulnerable : Almnzm Web : http://www.almnzm.com Exploit : http://example.com/almnzm/index.php?action=activateorder&orderid='Anything' -------------------- Discovered By LinuxDrox www.LeZr.Com Best Regards ,,,,...