medium5.0Public exploit code
CVE-2013-1402
DigiLIBE 3.4 and possibly other versions sends a redirect but does not exit, which allows remote attackers to obtain sensitive configuration information via a …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- DigiLIBE - Execution-After-Redirect Information Disclosure2013-01-22 · webapps · php · Verified
Impact
DigiLIBE 3.4 and possibly other versions sends a redirect but does not exit, which allows remote attackers to obtain sensitive configuration information via a direct request to configuration/general_configuration.html.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Digitiliti | Digilibe | Version 3.4 |