Foojan PHP Weblog allows remote attackers to obtain sensitive information via (1) a direct request to /daylinks/index.php or (2) a negative value in the daylinkspage parameter to index.php, which reveal the path in an error message.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Php_weblog | Foojan | * | * |