Design/Logic Flaw

SilverStripe 2.3.x before 2.3.6 allows remote attackers to obtain sensitive information via the 1 debugmemory parameter to core/control/Director.php or 2 debugprofile parameter to main.php...