Dicomdk

**Name of the Vulnerable Software and Affected Versions** x atrix xGuestBook version 1.02 **Description** The issue allows remote attackers to obtain sensitive information via a request without certain parameters, which reveals the installation path in an error message. Specifically, the absence of the `user`, `mail`, `p`, or `url` parameter in a request to the 'post.php' endpoint triggers this behavior. **Recommendations** For x atrix xGuestBook version 1.02, consider restricting access to the 'post.php' endpoint to minimize the risk of exploitation, or ensure that all requests to this endpoint include at least one of the required parameters (`user`, `mail`, `p`, or `url`) to prevent the disclosure of sensitive information.