Description
index.php in Destiney Links Script 2.1.2 allows remote attackers to obtain the installation path via an invalid show parameter referencing a non-existent file, which reveals the path in the resulting error message. NOTE: this issue might be resultant from a more serious issue such as directory traversal.
References
- 20060521 Destiney Links Script v2.1.2 mailing-list
- 937 third-party-advisory
- destineyls-index-path-disclosure(26611) vdb-entry
- 20248 third-party-advisory
- ADV-2006-1933 vdb-entry