qdPM Sensitive Information Disclosure Vulnerability - CVE-2015-3882 - Vulnerability Database

qdPM Sensitive Information Disclosure Vulnerability - CVE-2015-3882

Medium

Reference: CVE-2015-3882

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2015-3882

Title: qdPM Sensitive Information Disclosure Vulnerability

Overview:

qdPM 8.3 allows remote attackers to obtain sensitive information via invalid ID value to index.php/users/info/id/ID which reveals the installation path in an error message.