Description
auction_my_auctions.php in phpbb-Auction 1.2m and earlier allows remote attackers to obtain sensitive information via an invalid mode parameter, which leaks the full path in a PHP error message.
References
- 15029 third-party-advisory
- 1013779 vdb-entry
- 15706 vdb-entry
- http://www.snkenjoi.com/secadv/secadv9.txt
- http://www.phpbb-auction.com/sutra5600.html