Unscored CVE-2008-0136 EUVD-2008-0149GHSA-qm3f-523r-43c2

Snitz Forums 2000 3.4.05 allows remote attackers to obtain sensitive information via a direct request to forum/whereami.asp, which reveals …

Published Jan 8, 2008 · Updated Aug 7, 2024 · Assigned by mitre

Description

Snitz Forums 2000 3.4.05 allows remote attackers to obtain sensitive information via a direct request to forum/whereami.asp, which reveals the database path.

References

http://hackerscenter.com/archive/view.asp?id=28145
20080107 [HSC] Snitz Forums Multiple Vulnerabilities mailing-list
20080107 RE: [HSC] Snitz Forums Multiple Vulnerabilities mailing-list
http://www.packetstormsecurity.org/0801-exploits/snitz-multi.txt