Description
Shalwan MusicBox 2.3.4 and earlier allows remote attackers to obtain configuration information via a direct request to phpinfo.php, which calls the phpinfo function.
References
- 1284 third-party-advisory
- 20060724 MusicBox <= 2.3.4 XSS SQL injection Vulnerability mailing-list