pdesk.cgi in PerlDesk allows remote attackers to gain sensitive information via an invalid lang parameter, which includes pathname information in an error message.Referenceshttp://secunia.com/advisories/12512https://exchange.xforce.ibmcloud.com/vulnerabilities/17343http://marc.info/?l=bugtraq&m=109509026406554&w=2