CVE-2005-3689

Name of the Vulnerable Software and Affected Versions XMB version 1.9.2

Description The issue allows remote attackers to obtain the installation path. This is achieved by providing an invalid fid parameter in a newthread action to the post.php file.

Recommendations For XMB version 1.9.2, consider restricting access to the post.php file or validating the fid parameter to prevent exploitation. As a temporary workaround, avoid using the newthread action with unvalidated input until a patch is available.