Unscored CVE-2006-0494 EUVD-2006-0501GHSA-32qp-cx68-jc4c

Directory traversal vulnerability in MyBB (aka MyBulletinBoard) 1.02 allows local users with MyBB administrative privileges to include and …

Published Feb 1, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

Directory traversal vulnerability in MyBB (aka MyBulletinBoard) 1.02 allows local users with MyBB administrative privileges to include and possibly execute arbitrary local files via directory traversal sequences and a nul (%00) character in the plugin parameter.

References

20060130 MyBB 1.2 Local File Incusion mailing-list
mybb-plugins-file-include(24461) vdb-entry