Description
Intuit QuickBooks 2009 through 2012 might allow remote attackers to obtain pathname information via the qbwc://docontrol/GetCompanyFile functionality.
References
- 20120330 Intuit Help System Protocol File Retrieval mailing-list
- VU#232979 third-party-advisory
- quickbooks-intuit-path-disclosure(75173) vdb-entry