CVE-2003-1409

TOPo 1.43 allows remote attackers to obtain sensitive information by sending an HTTP request with an invalid parameter to 1 in.php or 2 out.php, which reveals the path to the TOPo directory in the error message...