Description
admin.php in MKPortal M1.1 RC1 allows remote attackers to obtain sensitive information via a direct request with an MK_PATH=1 query string, which reveals the path in an error message.
References
- 33407 vdb-entry
- 20070108 MKPortal Full Path Disclosure mailing-list
- mkportal-admin-path-disclosure(31333) vdb-entry