Description
Kayako SupportSuite 3.11.01 allows remote attackers to obtain server configuration information via a direct request to syncml/index.php, which prints the contents of the $_SERVER superglobal.
References
- 28613 third-party-advisory
- http://www.waraxe.us/advisory-63.html
- 3573 third-party-advisory
- 20080121 [waraxe-2008-SA#063] - Information Leakage in Kayako SupportSuite 3.11.01 mailing-list