Description
Kayako liveResponse 2.x allows remote attackers to obtain sensitive information via a direct request to addressbook.php and other include scripts, which reveals the path in an error message.
References
- 14425 vdb-entry
- 18399 vdb-entry
- 20050730 Kayako liveResponse Multiple Vulnerabilities mailing-list
- 16286 third-party-advisory
- http://www.gulftech.org/?node=research&article_id=00092-07302005