CVE-2005-0722

CVE-2005-0722 affects eXPerience2. A remote attacker can trigger a PHP error by requesting modules.php with no parameters, causing the web root full path to be disclosed in the error message. This is a path disclosure vulnerability rather than code execution. The available documents do not specif...

CVE-2005-0722

eXPerience2 allows remote attackers to obtain the full path for the web root via a direct request to modules.php without any parameters, which leaks the path in a PHP error message...