Description
Invision Power Board 1.3 Final allows remote attackers to gain sensitive information by selecting a file for "Personal Photo" that is not an image file, which displays the installation path in an error message.
References
- invision-invalid-path-disclosure(15400) vdb-entry
- 20040305 Invision Power Board 1.3 Final Path Disclosure Vulnerability mailing-list
- 9810 vdb-entry