Description
MyTopix 1.2.3 allows remote attackers to obtain the installation path via a direct request to logon.mod.php, which leaks the path in an error message.
References
- 413 third-party-advisory
- 20060204 [KAPDA::#26] - MyTopix Sql Injection & Path Disclosure mailing-list
- http://kapda.ir/advisory-249.html