calendar_scheduler.php in Topic Calendar 1.0.1 module for phpBB, when running on a Microsoft IIS server, allows remote attackers to obtain sensitive information via invalid parameters, which reveal the path in an error message.Referenceshttps://exchange.xforce.ibmcloud.com/vulnerabilities/19824http://marc.info/?l=bugtraq&m=111168190630576&w=2http://secunia.com/advisories/14659http://securitytracker.com/id?1013554
