Description
PHPX 3.2.6 and earlier allows remote attackers to obtain the physical path of PHPX via a null or invalid value in the limit parameter, which leaks the pathname in a database error message, as demonstrated using forums.php.
References
- http://www.phpx.org/project.php?action=view&project_id=1
- phpx-limit-path-disclosure(16064) vdb-entry
- 1010061 vdb-entry
- 20040504 Vulnerabilities In PHPX 3.26 And Earlier mailing-list
- 5906 vdb-entry
- 11554 third-party-advisory