Security Advisory

CVE-2010-4608

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2010-12-29 19:00:00
Last updated 2024-09-16 22:35:25
Assigner mitre
State PUBLISHED

Description

Habari 0.6.5 allows remote attackers to obtain sensitive information via a direct request to (1) header.php and (2) comments_items.php in system/admin/, which reveals the installation path in an error message.