CVE-2009-0442

Directory traversal vulnerability in bbcode.php in PHPbbBook 1.3 and 1.3h allows remote attackers to include and execute arbitrary local files via a .. dot dot in the l parameter...

CVE-2009-0442

CVE-2009-0442 affects PHPbbBook 1.3 and 1.3h. The vulnerability is a directory traversal in bbcode.php via the l parameter, allowing an attacker to include and execute arbitrary local files by supplying a ".." path component. Root cause is improper validation of the l parameter leading to path tr...