CVE-2006-2406

CVE-2006-2406 affects Unclassified NewsBoard (UNB) 1.5.3-d and possibly earlier versions when register_globals is enabled. The vulnerability is a directory traversal in bb_lib/abbc.css.php that allows remote attackers to include arbitrary files via .. sequences and a trailing null byte (%00) in t...