Description
index.php in Wheatblog (wB) allows remote attackers to obtain sensitive information via certain values of the postPtr[] and next parameters, which reveals the path in an error message.
References
- 20061109 Wheatblog [multiple xss (post) & full path disclosure] mailing-list
- 1867 third-party-advisory
- wheatblog-index-information-disclosure(30162) vdb-entry