Directory traversal vulnerability in login.php in JSBoard before 2.0.12 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the table parameter, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file, a related issue to CVE-2006-2019.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2007-04-03T16:00:00
Updated: 2024-08-07T13:13:40.994Z
Reserved: 2007-04-03T00:00:00
Link: CVE-2007-1842
Vulnrichment
No data.
NVD
Status : Modified
Published: 2007-04-03T16:19:00.000
Modified: 2024-11-21T00:29:17.330
Link: CVE-2007-1842
Redhat
No data.