NetSight
IP …
medium5.0

CVE-2012-4257

Yaqas (Yet Another Question & Answer System) 1.0 Alpha 1 allows remote attackers to obtain sensitive information via an invalid character in the PHPSESSID, whi…

Impact

Yaqas (Yet Another Question & Answer System) 1.0 Alpha 1 allows remote attackers to obtain sensitive information via an invalid character in the PHPSESSID, which reveals the installation path in an error message.

Affected products

VendorProductAffected versions
George KarpouzasYet Another Question \& Answer System
Version 1.0

Weakness classification

CWE-200

References