Description
soinfo.php in BadBlue 1.7.1 calls the phpinfo function, which allows remote attackers to gain sensitive information including ODBC passwords.
References
- badblue-soinfo-odbc-passwords(10690) vdb-entry
- 6243 vdb-entry
- 20021124 BadBlue XSS/Information Disclosure Vulnerabilities mailing-list
- 20021124 BadBlue XSS/Information Disclosure Vulnerabilities mailing-list
- 3243 third-party-advisory