Description
SendCard 3.3.0 allows remote attackers to obtain sensitive information via an invalid sc_language parameter to sendcard.php, which reveals the path in an error message.
References
- sendcard-sclanguage-information-disclosure(34672) vdb-entry
- 20070531 Full Path Disclosure in SendCard mailing-list
- 35740 vdb-entry
- 2770 third-party-advisory