Unscored CVE-2006-2216 EUVD-2006-2217GHSA-qv29-79jg-fwq7

Open Bulletin Board (OpenBB) 1.0.8 allows remote attackers to obtain the full path of the web server via an invalid pforums parameter to (1…

Published May 5, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

Open Bulletin Board (OpenBB) 1.0.8 allows remote attackers to obtain the full path of the web server via an invalid pforums parameter to (1) misc.php and (2) member.php.

References

845 third-party-advisory
openbb-multiple-path-disclosure(26193) vdb-entry
20060428 OpenBB 1.0.8 Full Path Disclosure mailing-list