phpGroupWare 0.9.14.005 and earlier allow remote attackers to obtain sensitive information via a direct request to (1) hook_admin.inc.php, (2) hook_home.inc.php, (3) class.holidaycalc.inc.php, and (4) setup.inc.php.sample, which reveals the path in an error message.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2005-11-28T23:00:00Z

Updated: 2024-09-17T01:40:57.600Z

Reserved: 2005-11-28T00:00:00Z

Link: CVE-2004-2575

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Analyzed

Published: 2004-12-31T05:00:00.000

Modified: 2011-03-08T02:19:03.080

Link: CVE-2004-2575

cve-icon Redhat

No data.