CVE-2006-3937

post.php in xatrix xGuestBook 1.02 allows remote attackers to obtain sensitive information via a request without the 1 user, 2 mail, 3 p, or 4 url parameter, which reveals the installation path in an error message...

CVE-2006-3937

CVE-2006-3937 affects x_atrix xGuestBook 1.02 via post.php. The vulnerability allows remote attackers to obtain sensitive information by crafting a request that omits any of the parameters (user, mail, p, url), causing an error message that reveals the installation path. The NVD records a CVSSv2 ...

CVE-2006-3937

post.php in xatrix xGuestBook 1.02 allows remote attackers to obtain sensitive information via a request without the 1 user, 2 mail, 3 p, or 4 url parameter, which reveals the installation path in an error message...

CVE-2006-3937: Undefined Security Weakness

post.php in xatrix xGuestBook 1.02 allows remote attackers to obtain sensitive information via a request without the 1 user, 2 mail, 3 p, or 4 url parameter, which reveals the installation path in an error message...