Description (CNA)
property.php in Widget Property 1.1.19 allows remote attackers to obtain the full server path via an invalid lang value, which leaks the path in the resulting error message.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://www.osvdb.org/21427
- http://pridels0.blogspot.com/2005/12/widget-property-vuln.html
- http://secunia.com/advisories/17829
ADP enrichment
No English description supplied.