Description
Directory traversal vulnerability in session.php in JSBoard 2.0.9 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the table parameter.
References
- 12319 vdb-entry
- jsboard-session-file-include(18990) vdb-entry
- 20050120 STG Security Advisory: [SSA-20050120-22] JSBoard file disclosure mailing-list
- 13920 third-party-advisory
- 1012949 vdb-entry