Description
BlackBoard 1.5.1 allows remote attackers to gain sensitive information via a direct request to (1) checkdb.inc.php, (2) admin.inc.php or (3) cp.inc.php, which reveals the path in a PHP error message.
References
- blackboard-directory-traversal(17636) vdb-entry
- 20041006 Multiple vulnerabilities in BlackBoard mailing-list