Lucene search

MitreCVE-2011-3759

HistorySep 23, 2011 - 11:55 p.m.

CVE-2011-3759

2011-09-2323:55:04

CWE-200

mitre

web.nvd.nist.gov

mybb

mybulletinboard

remote attacks

sensitive information

vulnerability

php

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.3

Confidence

Low

EPSS

0.003

Percentile

70.9%

JSON

MyBB (aka MyBulletinBoard) 1.6 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by inc/3rdparty/diff/Diff/ThreeWay.php and certain other files.

Affected configurations

Nvd

Node

mybbmybbMatch1.6.0

VendorProductVersionCPE
mybbmybb1.6.0cpe:2.3:a:mybb:mybb:1.6.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
mybb	mybb	1.6.0	cpe:2.3:a:mybb:mybb:1.6.0:::::::*

References

code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README

code.google.com/p/inspathx/source/browse/trunk/paths_vuln/mybb-1.6

www.openwall.com/lists/oss-security/2011/06/27/6

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.3

Confidence

Low

EPSS

0.003

Percentile

70.9%

JSON

Related for CVE-2011-3759