News Wizard 2.0 - Full Path Disclosure
Author: G00db0y
type: webapps
platform: php
port:
date_added: 2003-08-11
date_updated: 2012-11-29
verified: 1
codes:
tags:
aliases:
screenshot_url:
application_url:
source: https://www.securityfocus.com/bid/8389/info
News Wizard will disclose path information in an error page in response to a request for an invalid request for a web resource. This could disclose information that could be useful in further attacks against the system.
http://www.example.com/path/nw/article.php?id='