← Database

CVE-2006-6998

MEDIUM CVSS: 5.0 Published: 2007-02-12 Modified: 2026-06-16

Description

install/loader_help.php in Headstart Solutions DeskPRO allows remote attackers to obtain configuration information via a q=phpinfo QUERY_STRING, which calls the phpinfo function.

Affected Platforms

Headstart Solutions Deskpro

Weakness Type

CWE-200

References