CVE-2012-4674

PluXml before 5.1.6 allows remote attackers to obtain the installation path via the PHPSESSID...

CVE-2012-4674

PluXml before 5.1.6 is vulnerable: remote attackers can obtain the installation path via the PHPSESSID. Root cause is improper handling of PHPSESSID leading to path disclosure. Affected software: PluXml (versions prior to 5.1.6). Impact stated: potential information disclosure of installation pat...