Description (CNA)
MyTopix 1.2.3 allows remote attackers to obtain the installation path via an invalid hl parameter to index.php, which leads to path disclosure, possibly related to invalid SQL syntax.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://securityreason.com/securityalert/413
- http://www.securityfocus.com/archive/1/423950/100/0/threaded
- http://kapda.ir/advisory-249.html
ADP enrichment
No English description supplied.