Description
DGNews 2.1 allows remote attackers to obtain sensitive information via a fullnews request to news.php with an invalid newsid parameter, and other unspecified vectors, which reveal the path in various error messages.
References
- 2741 third-party-advisory
- http://www.netvigilance.com/advisory0021
- dgnews-news-path-disclosure(34540) vdb-entry
- 20070528 DGNews version 2.1 Path Disclosure Vulnerability mailing-list
- 34226 vdb-entry