CVE-2005-3689

post.php in XMB 1.9.2 allows remote attackers to obtain the installation path via an invalid fid parameter in a newthread action.

Date published : 2005-11-18

http://www.securityfocus.com/bid/15489

http://www.securityfocus.com/archive/1/417078/30/0/threaded