Description
Yaqas (Yet Another Question & Answer System) 1.0 Alpha 1 allows remote attackers to obtain sensitive information via an invalid character in the PHPSESSID, which reveals the installation path in an error message.
Unscored
CVE-2012-4257
EUVD-2012-4201GHSA-gf23-39mf-3q9f
Yaqas (Yet Another Question & Answer System) 1.0 Alpha 1 allows remote attackers to obtain sensitive information via an invalid character i…
Published Aug 13, 2012 · Updated Aug 6, 2024 · Assigned by mitre