Description
Noah's Classifieds 1.3 and earlier allows remote attackers to obtain sensitive information via an invalid list parameter in the showdetails method to index.php, which reveals the path in an error message.
References
- 20060320 Noah's Classifieds Multiple Path Disclosure and Cross Site Scripting Vulnerabilities mailing-list
- 471 third-party-advisory
- 605 third-party-advisory
- noahs-index-path-disclosure(25331) vdb-entry