CVE-2005-4172

CVE-2005-4172 affects eFiction 1.0, 1.1, and 2.0. The issue allows remote attackers to obtain sensitive information by requesting storyblock.php with no arguments, causing a PHP error message that leaks the full pathname. This is an information-disclosure flaw arising from an error message reveal...