Description
Apache Tomcat 4.0.3, when running on Windows, allows remote attackers to obtain sensitive information via a request for a file that contains an MS-DOS device name such as lpt9, which leaks the pathname in an error message, as demonstrated by lpt9.xtp using Nikto.
Remediation
References
Related Vulnerabilities
Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-2356)
WordPress Plugin Ecwid Ecommerce Shopping Cart PHP Object Injection (4.4.3)
WordPress Plugin WP Hotel Booking Cross-Site Request Forgery (1.10.1)
WordPress Plugin Sniplets Multiple Input Validation Vulnerabilities (1.2.2)
WordPress Plugin Restricted Site Access Unspecified Vulnerability (2.0)