CVE-2008-6308

CVE-2008-6308 affects the Private Messaging System (PMS) 1.2.3 and earlier for PunBB. A directory-traversal flaw allows remote attackers to include and execute arbitrary files via a .. in the pun_user[language] parameter targeting include/pms/ files (functions_navlinks.php, header_new_messages.ph...