Ultimate PHP Board Add.PHP Path Disclosure Vulnerability
BID:6333
Info
Ultimate PHP Board Add.PHP Path Disclosure Vulnerability
| Bugtraq ID: | 6333 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 07 2002 12:00AM |
| Updated: | Dec 07 2002 12:00AM |
| Credit: | Vulnerability discovery credited to "euronymous" <[email protected]>. |
| Vulnerable: |
Ultimate PHP Board Ultimate PHP Board 1.0 final beta |
| Not Vulnerable: | |
Discussion
Ultimate PHP Board Add.PHP Path Disclosure Vulnerability
Ultimate PHP Board (UPB) is a freely available, open source PHP Bulletin Board. It is available for the Unix and Linux operating systems.
Under some circumstances, it may be possible to gain access to sensitive information, such as the installation path of UPB. By passing an erroneous request to the add.php script, UPB may return the full path to the installation. This could lead to the disclosure of sensitive information, and potentially lead to further attack.
Ultimate PHP Board (UPB) is a freely available, open source PHP Bulletin Board. It is available for the Unix and Linux operating systems.
Under some circumstances, it may be possible to gain access to sensitive information, such as the installation path of UPB. By passing an erroneous request to the add.php script, UPB may return the full path to the installation. This could lead to the disclosure of sensitive information, and potentially lead to further attack.
Exploit / POC
Ultimate PHP Board Add.PHP Path Disclosure Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
Ultimate PHP Board Add.PHP Path Disclosure Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
Ultimate PHP Board Add.PHP Path Disclosure Vulnerability
References:
References: