CVE-2008-2028

miniBB 2.2, and possibly earlier, when registerglobals is enabled, allows remote attackers to obtain the full path via a direct request to the glang parameter in a registernew action to index.php, which leaks the path in an error message...

CVE-2008-2028

CVE-2008-2028 affects miniBB 2.2 (and possibly earlier) when register_globals is enabled. A direct request to the glang parameter in a registernew action to index.php leaks the full filesystem path in an error message, enabling partial confidentiality disclosure. The vulnerability’s scope and roo...