Description
login.php in 3CX Phone System 6.0.806.0, when 100% disk capacity is reached, allows remote attackers to gain sensitive information via unspecified vectors that reveal the installation path.
References
- 20081207 Multiple vulnerabilities in 3CX 6.0.806.0 mailing-list
- 3cxphonesystem-login-path-disclosure(52452) vdb-entry