MyScrapbook 3.1 allows remote attackers to obtain sensitive information via a direct request to files in the txt-db-api directory such as txt-db-api/sql.php, which reveals the path in an error message.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Myscrapbook | Myscrapbook | 3.1 (including) | 3.1 (including) |