2006-04-18 10:00:00
mitre
PUBLISHED
index.php in Lifetype 1.0.3 allows remote attackers to obtain sensitive information via an invalid show parameter, which reveals the path in an error message.