CVE-2005-2576: Undefined Security Weakness

CaLogic 1.22, and possibly earlier versions, allows remote attackers to obtain sensitive information via a direct request to 1 doclsqlres.php, 2 clmcpreload.php, 3 viewhistlog.php, 4 mcconfig.php, 5 doclsqlbak.php, 6 defcalsel.php, or 7 clminical.php, which reveals the path in an error message...