OSVDB ID: 22736 Title: MyBulletinBoard (MyBB) search.php SQL Error Message Table Prefix Disclosure |
Info |
|
|
Dates |
||||
|
|
Description |
MyBulletinBoard (MyBB) contains a flaw that may lead to an unauthorized information disclosure. The issue is triggered when a remote attacker provides malformed input to the search.php script, which may disclose the database table prefix in an SQL error message. While such information is relatively low risk, it is often useful in carrying out additional, more focused attacks. |
Classification |
Location:
Remote / Network Access
Attack Type: Information Disclosure Impact: Loss of Confidentiality Exploit: Exploit Public OSVDB: Web Related |
Solution |
Upgrade to version 1.1 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds. |
Products |
|
References |
|
Credit |
|
gmail.com - http://myimei.com/security