Description
Kellan Elliott-McCrea MagpieRSS allows remote attackers to obtain sensitive information via a direct request for (1) rss_fetch.inc.php or (2) rss_parse.inc.php, which reveals the path in various error messages.
References
- 1564 third-party-advisory
- 20060911 MagpieRSS (a simple RSS integration tool) Full path vul mailing-list
- magpierss-multiple-path-disclosure(28858) vdb-entry