SiteScape Forum 7.2 and possibly earlier stores the avf.rc configuraiton file under the web document root with insufficient access control, which allows remote attackers to obtain sensitive path information.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Sitescape_forum | Sitescape | 7.2 (including) | 7.2 (including) |