Description
PwsPHP 1.2.2 allows remote attackers to obtain sensitive information via a direct request to the admin directory, which reveals the path in an error message.
References
- 16234 vdb-entry
- 20050507 PwsPHP v1.2.2 Final - Multiples vulnerabilities mailing-list
- 15315 third-party-advisory