CVE-2012-5243 Information

Description

functions/suggest.php in Banana Dance B.2.6 and earlier allows remote attackers to read arbitrary database information via a crafted request.

Reference

http://www.exploit-db.com/exploits/23573 https://www.htbridge.com/advisory/HTB23118