Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3523-rxgq-qr34

Опубликовано: 01 мая 2022
Источник: github
Github: Не прошло ревью

Описание

viewforum.php in Ultimate PHP Board (UPB) 1.8 through 1.9.6 allows remote attackers to obtain sensitive information via an invalid (1) id or possibly (2) postorder parameter, which reveals the path in an error message when a file can not be opened.

viewforum.php in Ultimate PHP Board (UPB) 1.8 through 1.9.6 allows remote attackers to obtain sensitive information via an invalid (1) id or possibly (2) postorder parameter, which reveals the path in an error message when a file can not be opened.

EPSS

Процентиль: 70%
0.00636
Низкий

Связанные уязвимости

nvd
больше 20 лет назад

viewforum.php in Ultimate PHP Board (UPB) 1.8 through 1.9.6 allows remote attackers to obtain sensitive information via an invalid (1) id or possibly (2) postorder parameter, which reveals the path in an error message when a file can not be opened.

EPSS

Процентиль: 70%
0.00636
Низкий