Merlix Educate Server allows remote attackers to bypass intended security restrictions and obtain sensitive information via a direct request to (1) config.asp and (2) users.asp.
Affected Software
| Name |
Vendor |
Start Version |
End Version |
| Educate_server |
Merlix |
- (including) |
- (including) |
References