CVE-2006-1800

CVE-2006-1800 affects SimpleBBS 1.0.6–1.1, where a directory-traversal flaw in posts.php allows remote attackers to include and execute arbitrary files. The root cause is directory traversal via ".." sequences in the language cookie, demonstrated by injecting code into the gl_session cookie of us...