Проблемы с UltraBoard

Используется скрипт перл, в котором не комментируются некоторые мета-символы. Используя нулевой символ можно получить любой файл с сервера. Кроме того, можно вызвать бесконечный fork в приложении, что вызовет DoS против системы...

CVE-2000-0332

UltraBoard.pl or UltraBoard.cgi CGI scripts in UltraBoard 1.6 allows remote attackers to read arbitrary files via a pathname string that includes a dot dot .. and ends with a null byte...

ultrascripts ultraboard 1.6 - Directory Traversal

ultrascripts ultraboard 1.6 - Directory Traversal source: https://www.securityfocus.com/bid/1164/info UltraBoard 1.6 and possibly all 1.x versions is vulnerable to a directory traversal attack that will allow any remote browser to download any file that the webserver has read access to. On Window...

ultrascripts ultraboard 1.6 - Directory Traversal

source: https://www.securityfocus.com/bid/1164/info UltraBoard 1.6 and possibly all 1.x versions is vulnerable to a directory traversal attack that will allow any remote browser to download any file that the webserver has read access to. On Windows instalations, the file must reside on the same...