Directory traversal

2008-08-1919:41:00

PRIOn knowledge base

www.prio-n.com

7.9 High

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

72.5%

JSON

Multiple directory traversal vulnerabilities in CyBoards PHP Lite 1.21 allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the (1) script_path parameter to (a) options.php and the (2) lang_code parameter to (b) copy_vip.php and © process_edit_board.php in adminopts/. NOTE: some of these vectors might not be vulnerabilities under proper installation.

CPENameOperatorVersion
cyboards_php_liteeq1.21

CPE	Name	Operator	Version
	cyboards_php_lite	eq	1.21

References

packetstormsecurity.org/0808-exploits/cyboards-rfilfixss.txt

www.attrition.org/pipermail/vim/2008-August/002052.html

www.securityfocus.com/bid/30688

exchange.xforce.ibmcloud.com/vulnerabilities/44475