Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 14/05/2007 Updated: 16/10/2018

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 383

Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N

SonicBB 1.0 allows remote malicious users to obtain sensitive information via the (1) by[] parameter to search.php, (2) p[] parameter to viewforum.php, and the (3) id parameter to (a) viewforum.php or (b) members.php, which reveal the installation path in the resulting error message.

Vulnerable Product	Search on Vulmon	Subscribe to Product
sonicbb sonicbb 1.0

NVD-CWE-Other http://marc.info/?l=full-disclosure&m=117914586003786&w=2 http://www.netvigilance.com/advisory0018 http://www.osvdb.org/33906 http://secunia.com/advisories/25279 http://osvdb.org/34703 http://osvdb.org/34701 http://osvdb.org/34702 http://www.vupen.com/english/advisories/2007/1816 https://exchange.xforce.ibmcloud.com/vulnerabilities/34259 http://www.securityfocus.com/archive/1/468535/100/0/threaded https://nvd.nist.gov

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2007-1901

Vulnerability Summary

References

Vulmon Search

About

Products

Connect