Brynamics \Online Trade - Online trading and cryptocurrency investment system\ allows remote attackers to obtain sensitive information via a direct request for /dashboard/addplan /dashboard/paywithcard/charge /dashboard/withdrawal or /privacy&terms as demonstrated by reading database username database password database_name and IP address fields related to CVE-2018-12908.