CVE-2007-0689

CVE-2007-0689 affects MyBB 1.2.4. The vulnerability discloses the server installation path via three vectors: (1) MyBB member.php? and action[] parameter, (2) captcha.php?imagehash[] parameter, and (3) a direct request to inc/datahandlers/event.php. The common root cause is error message handling...