Description
index.php in BugPort 1.147 and earlier allows remote attackers to obtain sensitive information such as full path and system configuration via an invalid action parameter.
References
- bugport-index-path-disclosure(23921) vdb-entry
- ADV-2006-0009 vdb-entry
- 22144 vdb-entry
- 18282 third-party-advisory
- http://pridels0.blogspot.com/2005/12/bugport-multiple-vuln.html