CVE-2006-3170
CS-Forum before 0.82 allows remote attackers to obtain sensitive information via unspecified manipulations, possibly involving an empty collapse[] or readall parameter to index.php, which reveals the installation path in an error message.
Date published : 2006-06-22
http://www.securityfocus.com/archive/1/436789/100/0/threaded