While reviewing the software testing output for her organization's new application, Evaggelia notices that the application has produced errors that included directory and file information shown to the web application tester. What issue should she include in her report about the application?

Showing end users error information about the code, particularly with directory and file information included, means that the application does not perform proper exception handling. Errors should be logged or noted in a way that the administrator can handle, but end users (and attackers!) should not see that information. The software may be handling misuse properly, as the problem does not note if this was due to normal testing or misuse testing. There is no information about debugging code causing the output, and test coverage was not noted in the question.