CVE-2006-6567

CVE-2006-6567 concerns a PHP remote file inclusion in the Knowledge Base (mx_kb) 2.0.2 module for mxBB. The issue arises in the file includes/kb_constants.php where the parameter module_root_path can be supplied via a URL, enabling an attacker to cause the application to include and execute arbit...

CVE-2006-6568

CVE-2006-6568 describes a directory traversal vulnerability in the Knowledge Base (mx_kb) 2.0.2 module for mxBB, where an attacker can include arbitrary files through a .. sequence in the phpEx parameter of includes/kb_constants.php. Affected software: mxBB MX_KB 2.0.2 module. Root cause: imprope...