Description
search.php in MyBB 1.0.2 allows remote attackers to obtain sensitive information via a certain search request that reveals the table prefix in a SQL error message, possibly due to invalid parameters.
References
- mybb-search-information-disclosure(24272) vdb-entry
- 18577 third-party-advisory
- 20060114 MyBB 1.0.2 Sniffing table perfix bug in search.php mailing-list
- 22736 vdb-entry