CVE-2006-4191
23Vexday Risk Score
Sem sinal de exploração. Ela tem prova de conceito pública.
ssvc Attendepss 9.7%
probabilidade de exploração
9.7%top 5% das CVEs
exploração observada
nãonenhuma fonte reporta
1 exploit(s) público(s)
Directory traversal vulnerability in memcp.php in XMB (Extreme Message Board) 1.9.6 and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the langfilenew parameter, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file, which is then included by header.php.
Produtos afetados
n/a · n/aPoCs públicas encontradas — 1✓ VexDay Proof
cve_reference✓ VexDay Proofwww.exploit-db.com/exploits/2178⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.
Referências
http://retrogod.altervista.org/xmb_196_sql.htmlhttps://docs.xmbforum2.com/index.php?title=Security_Issue_Historyhttp://secunia.com/advisories/21293http://securityreason.com/securityalert/1411https://exchange.xforce.ibmcloud.com/vulnerabilities/28356https://www.exploit-db.com/exploits/2178http://www.securityfocus.com/archive/1/443167/100/0/threadedhttp://www.securityfocus.com/bid/19494http://www.securityfocus.com/bid/19501