Description
The CERN Image Map Dispatcher (htimage.exe) in Microsoft FrontPage allows remote attackers to determine the existence, and possibly partial contents, of arbitrary files under the web root via a relative pathname in the PATH_INFO.
References
- 20070603 CERN İmage Map Dispatcher mailing-list
- 42058 vdb-entry
- 2784 third-party-advisory