exploit-db-mirror/platforms/php/webapps/22925.txt
Offensive Security fffbf04102 Updated
2013-12-03 19:44:07 +00:00

7 lines
No EOL
413 B
Text
Executable file

source: http://www.securityfocus.com/bid/8220/info
eStore is prone to a path disclosure vulnerability.
It has been reported that a remote attacker may make a direct HTTP request for an eStore include script and in doing so trigger an error. The resulting error message will disclose potentially sensitive installation path information to the remote attacker.
http://www.example.com/admin/settings.inc.php