This is a vulnerability writeup describing a path disclosure issue in MyBB 1.6 due to improper sanitization of the 'mybb[forumread]' cookie variable. The provided cookie payload triggers an error that reveals the full path to the web root directory.
Classification
Writeup 90%
Attack Type
Info Leak
Complexity
Trivial
Reliability
Reliable
Target:MyBB 1.6
No auth needed
Prerequisites:Access to the target MyBB forum · Ability to send crafted cookies