Description
cindex.php in Scriptsez.net E-Dating System allows remote attackers to obtain the full path via an invalid id parameter in a dologin action, which leaks the path in an error message.
References
- 20060607 E-Dating System from scriptsez.net - XSS mailing-list
- 2300 third-party-advisory
- 20535 third-party-advisory