Description
Ultimate PHP Board (UPB) 1.0 allows remote attackers to view the physical path of the message board via a direct request to add.php, which leaks the path in an error message.
References
- 20021207 XSS and Path Disclosure in UPB mailing-list
- upb-add-path-disclosure(10788) vdb-entry
- 6333 vdb-entry