CVE-2007-6397

CVE-2007-6397 affects Flat PHP Board 1.2 and earlier. The vulnerability arises from directory traversal in index.php, enabling remote attackers to (1) create arbitrary files via .. in the username during user registration, and (2) read arbitrary PHP files via .. in (a) the topic parameter for a t...