CVE-2009-1949: Exposure of Sensitive Information to an Unauthorized Actor

importwbb1.php in Unclassified NewsBoard UNB 1.6.4 allows remote attackers to obtain sensitive information via a direct request, which reveals the installation path in an error message...