Description
getversions.php in versatileBulletinBoard (vBB) 1.0.0 RC2 lists the versions of all installed scripts, which allows remote attackers to obtain sensitive information via a direct request.
References
- 19973 vdb-entry
- 15075 vdb-entry
- 20051010 versatileBulletinBoard V1.0.0 RC2 (possibly prior versions) mailing-list
- http://rgod.altervista.org/versatile100RC2.html
- 17174 third-party-advisory