CVE-2006-2216

medium

Description

Open Bulletin Board (OpenBB) 1.0.8 allows remote attackers to obtain the full path of the web server via an invalid pforums parameter to (1) misc.php and (2) member.php.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/26193

http://www.securityfocus.com/archive/1/432592/100/0/threaded

http://securityreason.com/securityalert/845

Details

Source: Mitre, NVD

Published: 2006-05-05

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N

Severity: Medium

CVSS v3

Base Score: 5.3

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N