CVE-2008-0297

PhotoKorn is affected via update/update3.php which directly outputs database credentials, enabling remote attackers to obtain credentials (partial confidentiality loss). Root cause is inclusion of credentials in output. No patch/version details are provided in the supplied documents; remediation ...

CVE-2008-0297: Exposure of Sensitive Information to an Unauthorized Actor

PhotoKorn allows remote attackers to obtain database credentials via a direct request to update/update3.php, which includes the credentials in its output...