Directory traversal

Multiple directory traversal vulnerabilities in view.php in Webboard 2.90 beta and earlier allow remote attackers to read arbitrary files via a .. dot dot in the topic parameter...

CVE-2009-2600

CVE-2009-2600 describes multiple directory traversal vulnerabilities in Webboard 2.90 alpha/beta and earlier, where an attacker can read arbitrary files by supplying a two-dot sequence in the topic parameter of view.php. The affected software is Webboard (version 2.90 beta and earlier); the under...