Shalwan MusicBox 2.3.4 and earlier allows remote attackers to obtain configuration information via a direct request to phpinfo.php, which calls the phpinfo function.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|
| Musicbox | Musicbox | 2.3.4 (including) | 2.3.4 (including) |
References