CVE-2020-7959

LabVantage LIMS 8.3 contains an information-disclosure vulnerability where the web app can reveal database names. An attacker can enumerate databases by sending a crafted request and receiving an Unrecognized Database exception when the database does not exist. Public exploits exist (e.g., Exploi...