CVE-2006-4191 | BDVDB-2026-18691 Detail
Description#
Directory traversal vulnerability in memcp.php in XMB (Extreme Message Board) 1.9.6 and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the langfilenew parameter, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file, which is then included by header.php.
Impact#
No impact statement in the source data.
Weaknesses#
No weakness recorded in the source data.
References#
- http://secunia.com/advisories/21293
- http://securityreason.com/securityalert/1411
- https://www.exploit-db.com/exploits/2178
- http://www.securityfocus.com/bid/19501
- http://www.securityfocus.com/archive/1/443167/100/0/threaded
- http://retrogod.altervista.org/xmb_196_sql.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28356
- http://www.securityfocus.com/bid/19494
- https://docs.xmbforum2.com/index.php?title=Security_Issue_History
Exploit#
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.