2008-12-03 19:00:00
mitre
PUBLISHED
Wysi Wiki Wyg 1.0 allows remote attackers to obtain system information via an invalid categup parameter to index.php, which calls the phpinfo function.