Description
David Bennett PHP-Post (PHPp) 1.0 and earlier allows remote attackers to obtain sensitive information via a direct request for (1) footer.php, (2) template.php, or (3) lastvisit.php, which reveals the installation path in various error messages.
References
- 20061 vdb-entry
- 28973 vdb-entry
- ADV-2006-3688 vdb-entry
- 1607 third-party-advisory
- 22014 third-party-advisory
- 20060916 PHP-Post Multiple Input Validation Vulnerabilities mailing-list