Back to search
CVE-2007-3434
Published: Jun 27, 2007
Modified: Aug 7, 2024
PUBLISHED
Description
index.php in Pharmacy System 2 and earlier allows remote attackers to obtain sensitive information via a ' (quote) character in the page parameter, which reveals the table prefix in an error message.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
37578
vdb-entry
x_refsource_OSVDB
ADV-2007-2308
vdb-entry
x_refsource_VUPEN
pharmacysystem-index-information-disclosure(35158)
vdb-entry
x_refsource_XF
25792
third-party-advisory
x_refsource_SECUNIA
4095
exploit
x_refsource_EXPLOIT-DB
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now