index.php in VUBB alpha rc1 allows remote attackers to obtain the installation path of the application via a viewforum action with the f parameter set to a single quote ().
Name | Vendor | Start Version | End Version |
---|---|---|---|
Vubb | Vubb | alpha_rc1 (including) | alpha_rc1 (including) |