CVE-2007-2800

index.php in eTicket 1.5.5.1 and earlier allows remote attackers to obtain sensitive information via the 1 name, 2 email, 3 phone, or 4 subject parameters, which reveals the installation path in the resulting error messages...