2007-11-08 20:00:00
mitre
PUBLISHED
Justice Guestbook 1.3 allows remote attackers to obtain the full installation path via a direct request to cfooter.php3, which leaks the path in an error message.