Vulnerabilities > CVE-2006-6113 - Denial-Of-Service vulnerability in James Greenwood Monkey Boards 0.3.5

047910
CVSS 5.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
NONE
Availability impact
NONE
network
low complexity
james-greenwood
NVD
Published: 2006-11-28
Updated: 2018-10-17

Summary

Monkey Boards 0.3.5 allows remote attackers to obtain sensitive information via direct requests to (1) include/admin_auth.inc.php and (2) include/engine/class.compiler.php, which reveals the full path in an error message. NOTE: this issue is only an exposure if the administrator has changed the default script path.

Vulnerable Configurations

Part Description Count
Application
James_Greenwood
1

References