DGNews 2.1 allows remote attackers to obtain sensitive information via a fullnews request to news.php with an invalid newsid parameter, and other unspecified vectors, which reveal the path in various error messages.
Metrics
Affected Vendors & Products
References
History
No history.

Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2024-08-07T12:26:54.324Z
Reserved: 2007-02-03T00:00:00
Link: CVE-2007-0692

No data.

Status : Deferred
Published: 2007-05-30T20:30:00.000
Modified: 2025-04-09T00:30:58.490
Link: CVE-2007-0692

No data.