YaBB SE 1.5.1 allows remote attackers to obtain sensitive information via a direct HTTP request to Admin.php, which reveals the full path in a PHP error message...
6.1AI score0.0155EPSS
SaveExploits1References3
NVD•added 2004/12/31 5:0 a.m.•19 views
CVE-2004-2506
Unparsed web content delivery vulnerability in WIKINDX before 0.9.9g allows remote attackers to obtain sensitive information via a direct HTTP request to the config.inc file...