Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Yaqas (Yet Another Question & Answer System) 1.0 Alpha 1 allows remote attackers to obtain sensitive information via an invalid character in the PHPSESSID, which reveals the installation path in an error message.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Yaqas 敏感信息漏洞
Vulnerability Description
Yaqas (Yet Another Question & nswer System) 1.0 Alpha 1中存在漏洞。远程攻击者可利用该漏洞借助在PHPSESSID中的无效字符获取敏感信息，进而揭示错误消息的安装路径。
CVSS Information
N/A
Vulnerability Type
N/A