CVE-2006-4191 Directory traversal vulnerability in memcp.php in XMB (Extreme Message Board) 1.9.6 and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences i...
MediumCVSS 5.1
EPSS 9.9%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Directory traversal vulnerability in memcp.php in XMB (Extreme Message Board) 1.9.6 and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the langfilenew parameter, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file, which is then included by header.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| xmb software extreme message board | <= 1.9.6 | No fix listed |
References
- retrogod.altervista.org exploit
- 21293 exploit third-party-advisory vendor-advisory
- 1411 third-party-advisory
- 20060813 XMB <= 1.9.6 Final basename()/'langfilenew' arbitrary local inclusion / remote commands execution mailing-list
- 19494 vdb-entry
- 19501 exploit vdb-entry
- docs.xmbforum2.com
- xmb-memcp-file-include(28356) vdb-entry
- 2178 exploit