Ultimate PHP Board (UPB) 1.0 allows remote attackers to view the physical path of the message board via a direct request to add.php, which leaks the path in an error message.
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
Link | Tags |
---|---|
http://archives.neohapsis.com/archives/bugtraq/2002-12/0071.html | exploit mailing list |
https://exchange.xforce.ibmcloud.com/vulnerabilities/10788 | vdb entry |
http://www.securityfocus.com/bid/6333 | vdb entry |