Foojan PHP Weblog allows remote attackers to obtain sensitive information via (1) a direct request to /daylinks/index.php or (2) a negative value in the daylinkspage parameter to index.php, which reveal the path in an error message.
Link | Tags |
---|---|
http://marc.info/?l=bugtraq&m=112491140712884&w=2 | mailing list |