Description
REMLAB Web Mech Designer 2.0.5 allows remote attackers to obtain the full path of the script via an incorrect Tonnage parameter to calculate.php that triggers a divide-by-zero error, which leaks the path in an error message.
References
- remlab-calculate-path-disclosure(30538) vdb-entry
- 1911 third-party-advisory
- 20061127 REMLAB Web Mech Designer 2.0.5 Path Disclosure Vulnerability mailing-list
- 20061127 REMLAB Web Mech Designer 2.0.5 Path Disclosure Vulnerability mailing-list
- http://netvigilance.com/advisory0007
- 30264 vdb-entry