Description
Jupiter CMS 1.1.5, when display_errors is enabled, allows remote attackers to obtain the full server path via a direct request to modules/online.php.
References
- 20060407 Multiple vulnerability in jupiter CMS mailing-list
- jupitercm-online-path-disclosure(25703) vdb-entry
- ADV-2006-1302 vdb-entry
- 19582 third-party-advisory