Description
tools/tellhim.php in PHP-Wyana allows remote attackers to obtain sensitive information via an invalid lang parameter, which reveals the path in an error message.
References
- 1743 third-party-advisory
- 20061014 Full Path Disclosure in PHP-Wyana mailing-list
- phpwyana-tellhim-path-disclosure(29601) vdb-entry