Description
Frontpage Server Extensions allows remote attackers to determine the physical path of a virtual directory via a GET request to the htimage.exe CGI program.
References
- 20070603 CERN İmage Map Dispatcher mailing-list
- frontpage-cern-information-disclosure(34719) vdb-entry
- 964 vdb-entry