Monkey Boards version 0.3.5 Multiple Path Disclosure Vulnerabilities

netVigilance Security Advisory 9 Monkey Boards version 0.3.5 Multiple Path Disclosure Vulnerabilities Description: Monkey Boards is a fully-featured message board system suitable for smaller web sites. Build a virtual online community where users can post and reply to anyone. It is coded in PHP a...

CVE-2006-6113

Monkey Boards 0.3.5 and earlier are affected by path-disclosure flaws in include/admin_auth.inc.php and include/engine/class.compiler.php, which allow remote disclosure of the true server script path via error messages. The issue is exploitable remotely if an administrator has changed the default...