2007-04-25 16:00:00
mitre
PUBLISHED
admin.php in Phorum before 5.1.22 allows remote attackers to obtain the full path via the module[] parameter.