Vulnerability in Orbitcoders Orbitmatrix
CVE-2006-3610
index.php in Orbitcoders OrbitMATRIX 1.0 allows remote attackers to obtain sensitive information (partial database schema) via a modified page_name parameter, which reflects portions of an SQL query in the result. NOTE: it is not clear whether the information is target-specific. If not, then this issue is not an exposure.
EPSS: 0.012 (64.3th percentile) — read the EPSS interpretation.
Affected products
- Orbitcoders Orbitmatrix — versions 1.0
- N/a — versions n/a
References
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)