← Database

CVE-2008-3304

MEDIUM CVSS: 5.0 Published: 2008-07-25 Modified: 2026-06-16

Description

BilboBlog 0.2.1 allows remote attackers to obtain sensitive information via (1) an enable_cache=false query string to footer.php or (2) a direct request to pagination.php, which reveals the installation path in an error message.

Affected Platforms

Tuxplanet Bilboblog

Weakness Type

CWE-200

References