Description
Mafia Moblog 0.6M1 and earlier allows remote attackers to obtain the installation path in an error message via a direct request to (1) big.php and (2) upgrade.php.
References
- 20060608 Mafia Moblog Full Path Disclosure / SQL injection mailing-list
- mafia-moblog-big-upgrade-path-disclosure(26999) vdb-entry
- 1078 third-party-advisory
- ADV-2006-2249 vdb-entry
- 20529 third-party-advisory