Description
Noah's Classifieds 1.3 allows remote attackers to obtain the installation path via a direct request to include files, as demonstrated by classifieds/gorum/category.php.
References
- 20060222 [KAPDA::#29]Noah's classifieds multiple vulnerabilities mailing-list
- 1015667 vdb-entry
- noahs-category-path-disclosure(24898) vdb-entry
- http://www.kapda.ir/advisory-268.html
- ADV-2006-0703 vdb-entry