Description
e107 0.615 allows remote attackers to obtain sensitive information via a direct request to (1) alt_news.php, (2) backend_menu.php, (3) clock_menu.php, (4) counter_menu.php, (5) login_menu.php, and other files, which reveal the full path in a PHP error message.
Remediation
References
Related Vulnerabilities
WordPress Plugin Image Widget Unspecified Vulnerability (4.1.2)
Oracle Database Server CVE-2008-2604 Vulnerability (CVE-2008-2604)
Apache Tomcat Resource Management Errors Vulnerability (CVE-2014-0230)
Python Out-of-bounds Write Vulnerability (CVE-2019-12900)
WordPress Plugin Passster-Password Protection Weak Encoding (3.5.5.5.1)