Unscored CVE-2006-0131 EUVD-2006-0139GHSA-6q36-rj3v-2f7f

boastMachine 3.1 allows remote attackers to obtain sensitive information via a direct request to (1) footer.php and (2) side_menu.php, whic…

Published Jan 9, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

boastMachine 3.1 allows remote attackers to obtain sensitive information via a direct request to (1) footer.php and (2) side_menu.php, which reveals the path in an error message.

References

http://echo.or.id/adv/adv26-K-159-2006.txt
20060105 [ECHO_ADV_25$2006] Full path disclosure on boastMachine v3.1 mailing-list