CVE-2006-4971: Medium severity mybulletinboard mybulletinboard vulnerability
MyBB (aka MyBulletinBoard) allows remote attackers to obtain sensitive information via a direct request for inc/plugins/hello.php, which reveals the path in an error message.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2006-4971?
CVE-2006-4971 is classified as a moderate severity vulnerability due to its potential to disclose sensitive information.
How do I fix CVE-2006-4971?
To fix CVE-2006-4971, you should upgrade your MyBB installation to the latest version that addresses this vulnerability.
Which versions of MyBB are affected by CVE-2006-4971?
CVE-2006-4971 affects multiple versions of MyBB including 1.0_final, 1.1.1, 1.1.3, 1.10, 1.14, and others up to 1.20.
Can exploitation of CVE-2006-4971 lead to further attacks?
Yes, exploitation of CVE-2006-4971 can lead to unauthorized access to sensitive data, which could facilitate further attacks.
What types of information does CVE-2006-4971 disclose?
CVE-2006-4971 discloses the file path in an error message, revealing sensitive information about the server's directory structure.