Description
Directory traversal vulnerability in Task Manager in Invision Power Board (IP.Board) 2.0.1 allows limited remote attackers to include files via a .. (dot dot) in the "Task PHP File To Run" field.
References
- 17443 third-party-advisory
- 20051104 Invision Power Board Privilege Esaclation (2.0.1 + more) mailing-list
- 35429 vdb-entry
- ipb-taskmanager-directory-traversal(40000) vdb-entry