Description
PHPCounter 7.2 allows remote attackers to obtain sensitive information via a direct request to prelims.php, which reveals the path in an error message.
References
- 20050713 Path Disclosure and XSS problem in PHP Counter 7.2 mailing-list
- 15816 third-party-advisory
- 1014478 vdb-entry