Description
eMotion MediaPartner Web Server 5.0 and 5.1 allows remote attackers to obtain sensitive information via an HTTP request for a .bhtml file that contains a (1) . (dot) or (2) + (plus sign) at the end, which returns the source code for that file.
References
- 12236 vdb-entry
- 13820 third-party-advisory
- 1012855 vdb-entry
- 20050110 Portcullis Security Advisory 05-004 mailing-list
- mediapartner-bhtml-source-disclosure(18861) vdb-entry