PluXml before 5.1.6 allows remote attackers to obtain the installation path via the PHPSESSID.

Published Aug 26, 2012 · Updated Sep 16, 2024 · Assigned by mitre