Noahs Classifieds 1.3 allows remote attackers to obtain the installation path via a direct request to include files, as demonstrated by classifieds/gorum/category.php.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Noahs_classifieds | Phpoutsourcing | 1.2 (including) | 1.2 (including) |
| Noahs_classifieds | Phpoutsourcing | 1.3 (including) | 1.3 (including) |