Information disclosure in Deluxebb

CVE-2009-4466

DeluxeBB 1.3 allows remote attackers to obtain sensitive information via a crafted page parameter to misc.php, which reveals the installation path in an error message. NOTE: this issue might be resultant from improperly controlled computation in tools.php that leads to a denial of service (CPU or memory consumption).

Vulnerability class: Information Disclosure

EPSS: 0.024 (82.5th percentile) — read the EPSS interpretation.

Affected products

Deluxebb — versions 1.3
N/a — versions n/a

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

cve@mitre.org (Exploit, vdb-entry, x_refsource_BID)
cve@mitre.org (Exploit, exploit, x_refsource_EXPLOIT-DB)
cve@mitre.org (vdb-entry, x_refsource_XF)