CVE-2009-3756

The vulnerability CVE-2009-3756 affects phpBMS 0.96. An information-disclosure flaw allows remote attackers to obtain the installation path by directly requesting (1) footer.php, (2) header.php, (3) the show action in advancedsearch.php, or (4) choicelist.php. The error message reveals the instal...