SiteScape Forum 7.2 and possibly earlier stores the avf.rc configuraiton file under the web document root with insufficient access control, which allows remote attackers to obtain sensitive path information.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Sitescape_forum | Sitescape | 7.2 (including) | 7.2 (including) |