FLV Players 8 allows remote attackers to obtain sensitive information via (1) a direct request to paginate.php or (2) an invalid p parameter to player.php, which reveal the path in an error message.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Flv_player | Flv | 8 (including) | 8 (including) |