CVE-2003-1548
MyABraCaDaWeb 1.0.2 and earlier allows remote attackers to obtain sensitive information via an invalid IDAdmin or other parameter, which reveals the installation path in an error message.
Date published : 2008-03-05
http://www.securityfocus.com/bid/7126
http://www.securityfocus.com/archive/1/315317/30/25460/threaded