CVE-2006-1345: Medium severity MyBulletinBoard MyBulletinBoard vulnerability
polls.php in MyBB (aka MyBulletinBoard) 1.10 allows remote attackers to obtain sensitive information via a vote action with an "option[]=null" parameter value, which reveals the path in an error message.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2006-1345?
CVE-2006-1345 is categorized as a medium severity vulnerability due to the potential exposure of sensitive information.
How do I fix CVE-2006-1345?
To remediate CVE-2006-1345, users should upgrade MyBB to the latest version that addresses this vulnerability.
Who is affected by CVE-2006-1345?
CVE-2006-1345 affects MyBulletinBoard version 1.10 installations that allow vote actions without proper validation.
What type of attack is associated with CVE-2006-1345?
CVE-2006-1345 is associated with information disclosure attacks, allowing remote attackers to obtain sensitive data.
What is the impact of CVE-2006-1345?
The impact of CVE-2006-1345 includes exposing internal paths in error messages, which can aid attackers in furthering their exploits.