property.php in Widget Property 1.1.19 allows remote attackers to obtain the full server path via an invalid lang value, which leaks the path in the resulting error message.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|
| Widget_property | Widget_press | 1.1.19 (including) | 1.1.19 (including) |
References
