source: https://www.securityfocus.com/bid/7126/info MyABraCaDaWeb is reported to disclose path information in error messages when handling some invalid requests. This information could be useful in further attacks against a system hosting the software. http://www.example.com/index.php?IDAdmin=test http://www.example.com/index.php?base=test http://www.example.com/index.php?tampon=test http://www.example.com/index.php?SqlQuery=test