Description
Iono allows remote attackers to obtain the full server path via certain requests to (1) templates/iono/admin/denied.tpl.php, (2) templates/iono/admin/index.tpl.php, and (a) other unspecified files in templates/.
References
- iono-denied-index-information-disclosure(29505) vdb-entry
- 2386 third-party-advisory
- 32410 vdb-entry
- 32412 vdb-entry
- 32411 vdb-entry
- 20061012 Iono all version fullpath disclosure mailing-list