Description
Directory traversal vulnerability in include/common.php in PunBB before 1.2.14 allows remote authenticated users to include and execute arbitrary local files via a .. (dot dot) in the language parameter, related to register.php storing a language value in the users table.
References
- 1017131 vdb-entry
- 1824 third-party-advisory
- 30132 vdb-entry
- 20061030 Punbb <= 1.2.13 Multiple Vulnerabilities mailing-list
- ADV-2006-4256 vdb-entry
- http://www.wargan.org/index.php/2006/10/29/4-punbb-1213-multiple-vulnerabilities
- 22622 third-party-advisory
- http://www.punbb.org/changelogs/1.2.13_to_1.2.14.txt