Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
5.0
CVE-2006-4971: MyBulletinBoard reveals file location on hello.php request
CVE-2006-4971 · published 20 years ago
Summary
The MyBulletinBoard forum software can show its internal file path when someone accesses the file inc/plugins/hello.php. This information can help an attacker understand the server setup and plan further attacks. Apply the vendor’s security update or remove/disable the hello.php file to stop the information leak.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| mybulletinboard | mybulletinboard |
1.0.1 1.0.2 1.0.3 1.0.4 1.0_final 1.0_preview_release_2 1.0_rc2 1.1 1.1.1 1.1.2 1.1.3 1.1.4 4 more version ranges
cpe:2.3:a:mybulletinboard:mybulletinboard:1.0.1:*:*:*:*:*:*:* |
Original advisory text
MyBB (aka MyBulletinBoard) allows remote attackers to obtain sensitive information via a direct request for inc/plugins/hello.php, which reveals the path in an error message.
MyBB (aka MyBulletinBoard) allows remote attackers to obtain sensitive information via a direct request for inc/plugins/hello.php, which reveals the path in an error message.
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker partial control (estimated)
Severity
5.0
Medium
Timeline
Published25 Sep 2006
Updated3 Nov 2026
First seen29 Sep 2026
Sources
CVE-2006-4971 · NVD
Track software like this
Free during beta