Description
AdMan 1.0.20051221 and earlier allows remote attackers to obtain the full path via (1) a blank campaignId parameter to editCampaign.php and (2) a blank schemeId parameter to viewPricingScheme.php.
References
- 24065 vdb-entry
- http://pridels0.blogspot.com/2006/03/adman-v10x-sql-vuln.html
- 24066 vdb-entry
- adman-multiple-path-disclosure(25404) vdb-entry
- 19351 third-party-advisory
- ADV-2006-1071 vdb-entry