CVE-2005-1995: Undefined Security Weakness

Bitrix Site Manager 4.0.x allows remote attackers to obtain sensitive information via direct request to 1 subscrform.php or 2 dbqueryerror.php, which reveals the path in an error message...