Description
qdPM 8.3 allows remote attackers to obtain sensitive information via invalid ID value to index.php/users/info/id/[ID], which reveals the installation path in an error message.
Unscored
CVE-2015-3882
EUVD-2015-3917GHSA-mv83-c55q-p9p2
qdPM 8.3 allows remote attackers to obtain sensitive information via invalid ID value to index.php/users/info/id/[ID], which reveals the in…
Published Mar 17, 2017 · Updated Aug 6, 2024 · Assigned by mitre