CVE-2006-6998: Exposure of Sensitive Information to an Unauthorized Actor

install/loaderhelp.php in Headstart Solutions DeskPRO allows remote attackers to obtain configuration information via a q=phpinfo QUERYSTRING, which calls the phpinfo function...