FacturaScripts - Unauthenticated phpinfo Disclosure
Detected FacturaScripts exposes a debug branch in the Installer controller that calls phpinfo() when the request carries the phpinfo=TRUE query parameter, and on an instance that has not finished installation, this endpoint was reachable without authentication.
facturascriptsPoC 已收录
CVSS—