Description
calendar_scheduler.php in Topic Calendar 1.0.1 module for phpBB, when running on a Microsoft IIS server, allows remote attackers to obtain sensitive information via invalid parameters, which reveal the path in an error message.
References
- topic-calendar-path-disclosure(19824) vdb-entry
- 20050324 Multiple vulnerabilities in Topic Calendar 1.0.1 for phpBB mailing-list
- 14659 third-party-advisory
- 1013554 vdb-entry