Description
nqt.php in Network Query Tool (NQT) 1.6 allows remote attackers to obtain sensitive information via a string in the portNum parameter, which reveals the full path in an error message.
References
- nqt-nqtphp-path-disclosure(15957) vdb-entry
- http://www.waraxe.us/index.php?modname=sa&id=24
- 20040423 [waraxe-2004-SA#024 - XSS and full path disclosure in Network Query Tool 1.6] mailing-list
- 11479 third-party-advisory