Description
Limbo CMS 1.0.4.2 and earlier allows remote attackers to obtain the installation path of the application via a direct request to (1) doc.inc.php, (2) element.inc.php, and (3) node.inc.php, which leaks the path in an error message.
References
- 18063 third-party-advisory
- 21757 vdb-entry
- 1015364 vdb-entry
- 21758 vdb-entry
- http://rgod.altervista.org/limbo1042_xpl.html
- 21759 vdb-entry
- 20051214 LIMBO CMS <= v1.0.4.2 _SERVER[] array overwrite / remote code execution mailing-list
- ADV-2005-2932 vdb-entry