Description
Net Portal Dynamic System (NPDS) 5.10 and earlier allows remote attackers to obtain sensitive information via a direct request to (1) header.php, (2) contact.php, or (3) forum_extender.php, which reveals the path in an error message.
References
- 26289 vdb-entry
- 20523 third-party-advisory
- 26287 vdb-entry
- 1076 third-party-advisory
- 26288 vdb-entry
- npds-multiple-scripts-path-disclosure(27124) vdb-entry
- 20060608 NPDS <= 5.10 Local Inclusion, XSS, Full path disclosure mailing-list
- ADV-2006-2233 vdb-entry
- http://www.acid-root.new.fr/advisories/npds510.txt