CVE

Id
10379  
CVE No.
CVE-2004-1953  
Status
Candidate  
Description
phProfession 2.5 allows remote attackers to gain sensitive information via a direct HTTP request to upload.php, which reveals the path in a PHP error message.  
Phase
Assigned (20050504)  
Votes
None (candidate not yet proposed)  
Comments