YourPlace 1.0.2 and earlier allows remote attackers to obtain sensitive system information via a direct request via a direct request to user/uploads/phpinfo.php, which calls the phpinfo function.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Yourplace | Peterselie | * | 1.0.2 (including) |
Yourplace | Peterselie | 1.0 (including) | 1.0 (including) |
Yourplace | Peterselie | 1.0.1 (including) | 1.0.1 (including) |