An information disclosure vulnerability has been reported in forum51, board51, and news51, which can be exploited by malicious people to gain knowledge of a user's password hash.

The vulnerability is caused due to an access control error allowing anyone to access "user.idx" in the "data/" directory, which contains the password hashes. It may then be possible to identify the password by brute forcing it using a dictionary attack.

The vulnerability has been reported in the following versions, but others may also be affected:
- board51 v1.0b and v2.0
- forum51 v2.5b and v2.6b
- news51 v1.0a and v1.5

Solution
Restrict access to the "data/" directory and use strong passwords.

Provided and/or discovered by
Marc Bromm

Deep Links
Links available to Secunia VIM customers