Description
Wolfram Research webMathematica allows remote attackers to obtain sensitive information via a direct request to the MSP script, which reveals the installation path in an error message.
References
- 20091223 XSS in WebMathematica mailing-list