Description
index.php in Lifetype 1.0.3 allows remote attackers to obtain sensitive information via an invalid show parameter, which reveals the path in an error message.
References
- 1015941 vdb-entry
- lifetype-index-path-disclosure(25903) vdb-entry
- 711 third-party-advisory
- 20060414 Vulnerabilities in lifetype mailing-list