Habari 0.6.5 allows remote attackers to obtain sensitive information via a direct request to (1) header.php and (2) comments_items.php in system/admin/, which reveals the installation path in an error message.
Metrics
Affected Vendors & Products
References
History
No history.

Status: PUBLISHED
Assigner: mitre
Published: 2010-12-29T19:00:00Z
Updated: 2024-09-16T22:35:25.139Z
Reserved: 2010-12-29T00:00:00Z
Link: CVE-2010-4608

No data.

Status : Modified
Published: 2010-12-29T22:33:32.087
Modified: 2024-11-21T01:21:20.790
Link: CVE-2010-4608

No data.