CVE-2007-6624 Directory traversal vulnerability in printview.php in PNphpBB2 1.2i and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the phpEx parameter.
MediumCVSS 6.8
EPSS 1.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in printview.php in PNphpBB2 1.2i and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the phpEx parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pnphpbb | = 1.2.0_i | No fix listed |
References
- irk4z.wordpress.com
- 39879 vdb-entry
- 27039 exploit vdb-entry
- pnphpbb2-printview-file-include(39243) vdb-entry
- 4796 exploit