Design/Logic Flaw

polls.php in MyBB aka MyBulletinBoard 1.10 allows remote attackers to obtain sensitive information via a vote action with an "option=null" parameter value, which reveals the path in an error message...