Description
listmembers.php in EQdkp 1.3.2c and earlier allows remote attackers to obtain sensitive information via an invalid compare parameter, which reveals the path.
References
- eqdkp-listmembers-information-disclosure(34694) vdb-entry
- 20070604 Full Path Disclosure eqDKP 1.3.2c and prior mailing-list
- 38363 vdb-entry