functions/suggest.php in Banana Dance B.2.6 and earlier allows remote attackers to read arbitrary database information via a crafted request.
Affected Software
| Name |
Vendor |
Start Version |
End Version |
| Banana_dance |
Bananadance |
* |
b.2.6 (including) |
References