Description
HUBScript 1.0 allows remote attackers to obtain configuration information via a direct request to manage/phpinfo.php, which calls the phpinfo function.
References
- 55962 vdb-entry
- 35895 third-party-advisory
- hubscript-phpinfo-information-disclosure(51830) vdb-entry
- http://packetstormsecurity.org/0907-exploits/hubscript-xssphpinfo.txt