Security Advisory
CVE-2007-3127
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
content.php in WSPortal 1.0, when magic_quotes_gpc is disabled, allows remote attackers to obtain sensitive information via a "';" (quote semicolon) sequence in the page parameter, which reveals the installation path in the resulting forced SQL error message.