CVE-2009-2787: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in include/reputation/repprofile.php in the Reputation plugin 2.2.4, 2.2.3, 2.0.4, and earlier for PunBB, when registerglobals is enabled and magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the...

CVE-2008-6308: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in Private Messaging System PMS 1.2.3 and earlier for PunBB allow remote attackers to include and execute arbitrary files via a .. dot dot in the punuserlanguage parameter to 1 functionsnavlinks.php, 2 headernewmessages.php, 3 profilesend.php, and 4...