Title: Users can find web site path.
Vendor: Hosting Controller
Version: 6.1 Hot fix <= 3.3
Vendor URL: www.hostingcontroller.com
Solution: N/A
Release Date: 2007 - December
Credit: BugReport.IR
####################
- Discussion:
####################
13- [Remote Attacker] can find web site path.
13.1- When forum is not available, or it is not default, "http://[HC URL]/admin/forum/" shows website path with an error.
[Remote attacker] = (Unauthorized user without any permission or access.)
####################
- Credit :
####################
AmnPardaz Security Research Team - www.Bugreport.ir
Contact: admin[4t}bugreport{d0t]ir