CVE-2015-3882: Qdpm

Medium severity, CVSS 5.3. EPSS: 1.2% chance of exploitation in the next 30 days.

qdPM 8.3 allows remote attackers to obtain sensitive information via invalid ID value to index.php/users/info/id/[ID], which reveals the installation path in an error message.

Affected products

• Qdpm Qdpm: version 8.3 only

Published 2017-03-17. Last modified 2026-06-17.