CVE-2017-17927

CVE-2017-17927 : The vulnerability is in PHP Scripts Mall Professional Service Script, where a remote attacker can obtain sensitive full-path information by sending a crafted PATH_INFO to the URL path service-list/category/. The root cause is improper handling of PATH_INFO in that script, leading...