Description
search.results.php in HiveMail 3.1 and earlier allows remote attackers to obtain the installation path via certain manipulations related to the (1) searchdate and (2) folderids parameters.
References
- 27104 vdb-entry
- 1016531 vdb-entry
- hivemail-searchresults-path-disclosure(27696) vdb-entry
- http://pridels0.blogspot.com/2006/07/hivemail-vuln.html