CVE-2006-3104

users/index.php in Bitweaver 1.3 allows remote attackers to obtain sensitive information via an invalid sort_mode parameter, which reveals the installation path and database information in the resultant error message.

Date published : 2006-06-20

http://www.securityfocus.com/archive/1/437491/100/0/threaded

http://sourceforge.net/project/shownotes.php?release_id=336854&group_id=141358