eboard40.txt

Hi, I found a vulnerability in eBoard ver. 4.0 which allows remote users to open any file on the system. I think all prior vers have the same problem. eBoard is a wwwboard-like CGI script. It's written by Mike Bagneski in Perl and for sale! $14.95. http://www.e-scripts.com/eboard/ It doesn't chec...

e_Board index2.cgi message Parameter Traversal Arbitrary File Access

The remote host is running eBoard, a web-based bulletin board system written in Perl. The version of eBoard running on the remote web server has a directory traversal vulnerability in the 'message' parameter of 'index2.cgi'. A remote attacker could exploit this to read sensitive information from...

escripts software e_board 4.0 - Directory Traversal

escripts software eboard 4.0 - Directory Traversal source: https://www.securityfocus.com/bid/12048/info It is reported that eBoard is vulnerable to a directory traversal vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied input. By including '../'...

escripts software e_board 4.0 - Directory Traversal

source: https://www.securityfocus.com/bid/12048/info It is reported that eBoard is vulnerable to a directory traversal vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied input. By including '../' directory traversal sequences and a NULL %00 in the...