eStore 1.0.1/1.0.2 - 'Settings.inc.php' Full Path Disclosure

source: https://www.securityfocus.com/bid/8220/info eStore is prone to a path disclosure vulnerability. It has been reported that a remote attacker may make a direct HTTP request for an eStore include script and in doing so trigger an error. The resulting error message will disclose potentially...