Description
Contrexx before 1.0.5 allows remote attackers to obtain sensitive information via a direct request to /config/version.xml.
References
- 1014554 vdb-entry
- 16169 third-party-advisory
- contrexx-version-disclosure(21488) vdb-entry
- 20050722 Advisory 11/2005: Multiple vulnerabilities in Contrexx mailing-list
- 14352 vdb-entry
- 18170 vdb-entry
- http://www.hardened-php.net/advisory_112005.59.html