CVE-2006-4938

help.php in Moodle before 1.6.2 does not check the existence of certain help files before including them, which might allow remote authenticated users to obtain the path in an error message...

CVE-2006-4938

Moodle before 1.6.2 contains a vulnerability in help.php where it does not verify the existence of certain help files before including them, which may allow a remote authenticated user to cause an error message that reveals the file path. The CVE is documented in multiple sources (NVD entry for C...