Description
WeBid 1.0.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by js/calendar.php and certain other files.
Remediation
References
Related Vulnerabilities
WordPress Plugin Easing Slider Multiple Cross-Site Scripting Vulnerabilities (2.2.0.6)
WordPress Plugin Media from FTP PHP Object Injection (9.79)
WordPress Plugin Simple Slideshow Manager Multiple Unspecified Vulnerabilities (2.1)
WordPress Plugin ARPrice-Responsive Pricing Table Cross-Site Scripting (2.2)