Description
videoPage.php in L0j1k tinyMuw 0.1.0 allows remote attackers to obtain sensitive information via a certain id parameter, probably with an invalid value, which reveals the path in an error message.
References
- 20060609 TinyMuw v1.0 - XSS mailing-list
- tinymuw-videopage-path-disclosure(27155) vdb-entry
- ADV-2006-2310 vdb-entry
- 1091 third-party-advisory