Full path disclosure

Disclosed: 2014-04-18 05:18:04 By siddiki To localize
Unknown
Vulnerability Details
I signed up for localize with [email protected], and localize sent me a verification link which was: `http://www.localize.io/verify/e6be646b24pdd3w6d5c27ppa9a267ee7` When I visited that link I found it was showing the following error: `Fatal error: Call to a member function setEmail_lastVerificationAttempt() on a non-object in /var/www/vhosts/lvps178-77-99-228.dedicated.hosteurope.de/httpdocs_localize/index.php on line 120 ` which includes the full path of the website.This should be mitigated.
Actions
View on HackerOne
Report Stats
  • Report ID: 7894
  • State: Closed
  • Substate: resolved
  • Upvotes: 2
Share this report