Description
MyBB (aka MyBulletinBoard) allows remote attackers to obtain sensitive information via a direct request for inc/plugins/hello.php, which reveals the path in an error message.
References
- ADV-2006-3666 vdb-entry
- 20060915 MyBB Full path and Cross site scripting vulnerabilities mailing-list
- 1628 third-party-advisory