Description
index.php in CoolPHP 1.0-stable allows remote attackers to gain sensitive information via an invalid op parameter, which reveals the path in an error message.
References
- 12850 third-party-advisory
- coolphp-path-disclosure(17744) vdb-entry
- 20041016 Multiple Vulnerabilities in CoolPHP mailing-list
- 1011748 vdb-entry