Vulnerability CVE-2006-4191
Published: 2006-08-16   Modified: 2012-02-12

Description:
Directory traversal vulnerability in memcp.php in XMB (Extreme Message Board) 1.9.6 and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the langfilenew parameter, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file, which is then included by header.php.

See advisories in our WLB2 database:
Topic
Author
Date
High
XMB <= 1.9.6 Final basename()/\'langfilenew\' arbitrary local inclusion / remote commands execution
rgod
22.08.2006

Type:

CWE-Other

CVSS2 => (AV:N/AC:H/Au:N/C:P/I:P/A:P)

CVSS Base Score
Impact Subscore
Exploitability Subscore
5.1/10
6.4/10
4.9/10
Exploit range
Attack complexity
Authentication
Remote
High
No required
Confidentiality impact
Integrity impact
Availability impact
Partial
Partial
Partial
Affected software
Xmb software -> Extreme message board 

 References:
http://retrogod.altervista.org/xmb_196_sql.html
http://securityreason.com/securityalert/1411
http://www.securityfocus.com/archive/1/443167/100/0/threaded
http://www.securityfocus.com/bid/19494
http://www.securityfocus.com/bid/19501
https://exchange.xforce.ibmcloud.com/vulnerabilities/28356
https://www.exploit-db.com/exploits/2178
Copyright 2024, cxsecurity.com

 

Back to Top