drupal7: full path disclosure
| Package(s): | drupal7 | CVE #(s): | CVE-2012-2922 | ||||||||||||||||||||
| Created: | June 4, 2012 | Updated: | November 2, 2012 | ||||||||||||||||||||
| Description: | From the CVE entry:
The request_path function in includes/bootstrap.inc in Drupal 7.14 and earlier allows remote attackers to obtain sensitive information via the q[] parameter to index.php, which reveals the installation path in an error message. | ||||||||||||||||||||||
| Alerts: |
| ||||||||||||||||||||||