CVE-2007-0194

The CVE-2007-0194 entry concerns MKPortal M1.1 RC1. An attacker can remote‑access admin.php and trigger MK_PATH=1 to cause an error message that reveals internal path information, exposing sensitive data (confidentiality impact). The vulnerability is rooted in an information disclosure flaw in MK...