mcNews Path Disclosure Vulnerability

mcNews is a set of scripts for allowing users to post news stories on a webpage. It will run on most Linux and Unix variants as well as Microsoft Windows operating systems.

mcNews will disclose sensitive path information when a malformed web request is made.

This type of information may used be in further attacks against the host.


 

Privacy Statement
Copyright 2010, SecurityFocus