Description

MyBB (aka MyBulletinBoard) before 1.6.7 allows remote attackers to obtain sensitive information via a malformed forumread cookie, which reveals the installation path in an error message.

Remediation

References

CVE-2012-2327

Related Vulnerabilities

WordPress Plugin Fungif The Awesome GIFs Cross-Site Scripting (2.0)

MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-22911)

XWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-29506)

Apache HTTP Server Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') Vulnerability (CVE-2005-2088)

WordPress Improper Input Validation Vulnerability (CVE-2011-4957)

Severity

Medium

Classification

CVE-2012-2327 CWE-200

Tags

Missing Update Known Vulnerabilities