CVEvulnerability
CVE-2008-1717
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2008-04-09
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-200
Description
WoltLab Community Framework (WCF) 1.0.6 in WoltLab Burning Board 3.0.5 allows remote attackers to obtain the full path via invalid (1) page and (2) form parameters, which leaks the path from an exception handler when a valid class cannot be found.
Affected configurations
• woltlab burning board 3.0.5
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- http://archives.neohapsis.com/archives/fulldisclosure/2008-04/0161.html archives.neohapsis.com
- http://lists.grok.org.uk/pipermail/full-disclosure/2008-April/061271.html lists.grok.org.uk
- http://secunia.com/advisories/29719 Vendor Advisory
- http://www.securityfocus.com/archive/1/490560/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/490782/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/28678 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41713 exchange.xforce.ibmcloud.com
- http://archives.neohapsis.com/archives/fulldisclosure/2008-04/0161.html archives.neohapsis.com
- http://lists.grok.org.uk/pipermail/full-disclosure/2008-April/061271.html lists.grok.org.uk
- http://secunia.com/advisories/29719 Vendor Advisory
- http://www.securityfocus.com/archive/1/490560/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/490782/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/28678 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41713 exchange.xforce.ibmcloud.com