polls.php in MyBB (aka MyBulletinBoard) 1.10 allows remote attackers to obtain sensitive information via a vote action with an "option[]=null" parameter value, which reveals the path in an error message.
References
Configurations
Information
Published : 2006-03-21 17:02
Updated : 2018-10-18 09:32
NVD link : CVE-2006-1345
Mitre link : CVE-2006-1345
JSON object : View
CWE
Products Affected
mybulletinboard
- mybulletinboard