CVE-2007-6379
BadBlue 2.72b and earlier allows remote attackers to obtain sensitive information via an invalid browse parameter, which reveals the installation path in an error message.
Date published : 2007-12-14
http://www.securityfocus.com/bid/26803
http://www.securityfocus.com/archive/1/484834/100/0/threaded
