PHPCounter 7.2 allows remote attackers to obtain sensitive information via a direct request to prelims.php, which reveals the path in an error message.Referenceshttp://marc.info/?l=bugtraq&m=112129495128834&w=2http://secunia.com/advisories/15816http://securitytracker.com/id?1014478
