Unscored CVE-2004-1662 EUVD-2004-1656GHSA-cfxp-7mcx-7phh

YaBB SE 1.5.1 allows remote attackers to obtain sensitive information via a direct HTTP request to Admin.php, which reveals the full path i…

Published Feb 20, 2005 · Updated Aug 8, 2024 · Assigned by mitre

Description

YaBB SE 1.5.1 allows remote attackers to obtain sensitive information via a direct HTTP request to Admin.php, which reveals the full path in a PHP error message.

References

20040904 FUll Path Disclosure in YABBSE mailing-list
yabb-admin-path-disclosure(17267) vdb-entry
http://echo.or.id/adv/adv05-y3dips-2004.txt