BugTraq
Re: Invision Power Board 1.3 Final Path Disclosure Vulnerability Mar 05 2004 05:18PM
JeiAr (security gulftech org)
In-Reply-To: <20040305130832.64623.qmail (at) web25104.mail.ukl.yahoo (dot) com [email concealed]>

This "vulnerability" was actually reported by GulfTech Security on March 2nd

http://www.gulftech.org/03022004.php

and posted on the governmentsecurity.org message board March 3rd

http://www.governmentsecurity.org/forum/index.php?showtopic=7008

>~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*

>

>Product: Invision Power Board

> http://www.invisionboard.com

>Versions: 1.3 Final (and probably lower)

>Bug: Disclosure of install path

>Impact: Attacker learns the local install

> path of Invision Power Board and the

> htdocs

>Date: March 05, 2004

>Author: Shaun Colley

> Email: shaunige (at) yahoo.co (dot) uk [email concealed]

> WWW: http://www.nettwerked.co.uk

>

>~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*

>

[ reply ]


 

Privacy Statement
Copyright 2010, SecurityFocus