Summary
Omni-Secure is prone to multiple file-disclosure vulnerabilities.
An attacker can exploit these issues to view local files in the context of the web server process. This may aid in further attacks.
Versions Omni-Secure 5, 6 and 7 are vulnerable.
References
Updated on 2015-03-25
Severity
Classification
-
CVSS Base Score: 5.0
AV:N/AC:L/Au:N/C:P/I:N/A:N
Related Vulnerabilities
- Apache Web Server Configuration File Environment Variable Local Buffer Overflow Vulnerability
- A4Desk Event Calendar 'eventid' Parameter SQL Injection Vulnerability
- Apache Tomcat SecurityConstraints Security Bypass Vulnerability
- Alt-N WebAdmin Remote Source Code Information Disclosure Vulnerability
- 1024 CMS 1.1.0 Beta 'force_download.php' Local File Include Vulnerability