Description
Destiney Links Script 2.1.2 does not protect library and other support files, which allows remote attackers to obtain the installation path via a direct URL to files in the (1) include and (2) themes/original directories.
References
- 20060521 Destiney Links Script v2.1.2 mailing-list
- 937 third-party-advisory
- destineyls-multiple-path-disclosure(26610) vdb-entry