JVN#65914253 Directory traversal vulnerability in multiple phpspot products

Multiple products (BBS Software etc.) provided by phpspot contain a directory traversal vulnerablility.

Impact

A remote attacker could view files on the server where the product is installed. This could lead to disclosure of contents.

Solution

Update the software
Update to latest version according to the information provided by developer.

Products Affected

• PHP BBS
• PHP Image Capture BBS
• PHP&CSS BBS
• PHP BBS CE
• PHP_RSS_Builder
• webshot

Note that versions of the above products containing a php file in the parent directory timestamped on or after September 14, 2009 are not affected by this vulnerability.