Directory traversal vulnerability in MyBB (aka MyBulletinBoard) 1.02 allows local users with MyBB administrative privileges to include and possibly execute arbitrary local files via directory traversal sequences and a nul (%00) character in the plugin parameter.
References
Configurations
Information
Published : 2006-01-31 18:02
Updated : 2018-10-19 08:45
NVD link : CVE-2006-0494
Mitre link : CVE-2006-0494
JSON object : View
CWE
Products Affected
mybulletinboard
- mybulletinboard