Description
browse.php in Website Baker Project allows remote attackers to obtain sensitive data via (1) a directory that does not exist in the dir parameter or (2) a direct request to certain php files, which reveal the path in an error message.
References
- 20050728 Website Baker Project Multiple Vulnerabilities mailing-list
- 18344 vdb-entry
- 16263 third-party-advisory
- website-baker-url-path-disclosure(21633) vdb-entry
- 18343 vdb-entry