PT-2017-6700

Name of the Vulnerable Software and Affected Versions qdPM version 8.3 Description The issue allows remote attackers to obtain sensitive information via a direct request to specific files, including 1 "core/config/databases.yml", 2 "core/log/qdPM prod.log", or 3...

CVE-2015-3881: Exposure of Sensitive Information to an Unauthorized Actor

Information disclosure issue in qdPM 8.3 allows remote attackers to obtain sensitive information via a direct request to 1 core/config/databases.yml, 2 core/log/qdPMprod.log, or 3 core/apps/qdPM/config/settings.yml...