moziloCMS 1.11 allows remote attackers to obtain sensitive information via the (1) gal parameter to gallery.php (2) page and (3) cat parameter to index.php or (4) file parameter to download.php which reveals the installation path in an error message.