CVE-2006-4908

In the provided documents, OSU 3.11alpha and 3.10a are reported vulnerable to information disclosure when a URL contains an asterisk wildcard, which allows remote attackers to view all matching file and directory information. The root cause is exposure of directory listings via unintended wildcar...

CVE-2006-4907

OSU 3.11alpha and 3.10a are affected by a vulnerability where remote attackers can obtain sensitive information by requesting a non-existent file; the resulting error message reveals the web root path. The issue, as described in CVE-2006-4907, has no additional exploit details or mitigation infor...