Unscored CVE-2006-3625 EUVD-2006-3620GHSA-p84r-r7h9-jchp

FLV Players 8 allows remote attackers to obtain sensitive information via (1) a direct request to paginate.php or (2) an invalid p paramete…

Published Jul 14, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

FLV Players 8 allows remote attackers to obtain sensitive information via (1) a direct request to paginate.php or (2) an invalid p parameter to player.php, which reveal the path in an error message.

References

flvplayer-player-path-disclosure(27726) vdb-entry
20060712 FLV Players Multiple Input Validation Vulnerabilities mailing-list