CVE-2006-6568: Undefined Security Weakness

Directory traversal vulnerability in includes/kbconstants.php in the Knowledge Base mxkb 2.0.2 module for mxBB allows remote attackers to include arbitrary files via a .. dot dot sequence in the phpEx parameter...

CVE-2006-6567: Undefined Security Weakness

PHP remote file inclusion vulnerability in includes/kbconstants.php in the Knowledge Base mxkb 2.0.2 module for mxBB allows remote attackers to execute arbitrary PHP code via a URL in the modulerootpath parameter...