ezStats Multiple Products Information Disclosure Weakness
Description
A weakness has been discovered in multiple ezStats products, which can be exploited by malicious people to disclose certain system information.
The application provides unrestricted access to admin/apitest.php.
For more information see vulnerability #1 in:
SA52104
List of affected products:
* ezStats2 for Playstation Network version 1.10.
* ezStats2 Serverviewer version 0.62.
* ezStats2 for Medal of Honor Warfighter version 1.0.
Vulnerable Products
Vulnerable Software: ezStats2 for Medal of Honor Warfighter 1.xezStats2 for Playstation Network 1.xezStats2 Serverviewer 0.x