FullPath disclosure in Xaraya 1.0.1

Author : Ph03n1X http://student.te.ugm.ac.id/phoenix03 Description Software : Xaraya v 1.0.1 http://xaraya.com PoC : 1. http://site.xxx/xaraya/xaraya-1.0.1/html/includes/xarTemplate.php Call to undefined function: xarcoregetvardirpath...

Fullpath disclosure in roundcube webmail

I try this request in my mailbox http://xxxx.com/roundcube/?auth=3Dcf559dcf52d8801ccd51cd1f3ba3eca08d1b0bce= &task=3Dma60il then roundcube shows this warning PHP Error in /usr/local/apache2/htdocs/roundcube/index.php 301: Invalid request failed/file not found The requested page was not found!...