CVE-2008-1717

WoltLab Community Framework (WCF) 1.0.6 in WoltLab Burning Board 3.0.5 allows remote attackers to obtain the full path via invalid (1) page and (2) form parameters, which leaks the path from an exception handler when a valid class cannot be found.

Link	Resource
http://lists.grok.org.uk/pipermail/full-disclosure/2008-April/061271.html
http://secunia.com/advisories/29719	Vendor Advisory
http://www.securityfocus.com/bid/28678
http://archives.neohapsis.com/archives/fulldisclosure/2008-04/0161.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/41713
http://www.securityfocus.com/archive/1/490782/100/0/threaded
http://www.securityfocus.com/archive/1/490560/100/0/threaded

Configuration 1

cpe:2.3:a:woltlab:burning_board:3.0.5:*:*:*:*:*:*:*

---

Published : 2008-04-09 09:05

Updated : 2018-10-11 08:36

---

NVD link : CVE-2008-1717

Mitre link : CVE-2008-1717

Burning Board

Woltlab

CWE-200