Description
vuBB 0.2.1 and earlier allows remote attackers to obtain sensitive information via a direct request to includes/vubb.php, which leaks the path in an error message.
References
- 1948 third-party-advisory
- 20060618 vuBB <= 0.2.1 [BFA] SQL Injection Exploit + Advisory link mailing-list
- vubb-multiple-path-disclosure(27299) vdb-entry
- http://www.acid-root.new.fr/advisories/vubb021b.txt
- ADV-2006-2458 vdb-entry