mboard-rfi.txt

mboard remote file include By: e.wiZz! Site: madspot.org In the wild... Script site: http://www.phpjunkyard.com/php-message-board.php Download: http://www.phpjunkyard.com/download.php?script=mboard Vulnerable file: mboard.php Vulnerable code: if fileexists$file includeonce$file; else Exploit:...

CVE-2006-6262

Directory traversal vulnerability in mboard.php in PHPJunkYard aka Klemen Stirn MBoard 1.22 and earlier allows remote attackers to create arbitrary empty files via a .. dot dot in the origid parameter...

CVE-2006-6262

CVE-2006-6262 describes a directory traversal in PHPJunkYard’s MBoard 1.22 and earlier, where an attacker can exploit the orig_id parameter to create arbitrary empty files. Affected product: PHPJunkYard MBoard (Klemen Stirn) up to version 1.22. The vulnerability is rooted in the orig_id handling,...