CVE-2005-3689 Information

Description

post.php in XMB 1.9.2 allows remote attackers to obtain the installation path via an invalid fid parameter in a newthread action.

Reference

http://irannetjob.com/content/view/163/28/ http://secunia.com/advisories/17642 http://www.securityfocus.com/archive/1/417078/30/0/threaded http://www.securityfocus.com/bid/15489 http://www.vupen.com/english/advisories/2005/2488