Description
Directory traversal vulnerability in mboard.php in PHPJunkYard (aka Klemen Stirn) MBoard 1.22 and earlier allows remote attackers to create arbitrary empty files via a .. (dot dot) in the orig_id parameter.
References
- ADV-2006-4769 vdb-entry
- http://www.mayhemiclabs.com/wiki/wikka.php?wakka=MHL2006004
- 1988 third-party-advisory
- http://www.mayhemiclabs.com/advisories/MHL-2006-004.txt
- 21304 vdb-entry
- 20061127 MHL-2006-003 Public Advisory: "mboard" file creation issue mailing-list
- mboard-origid-directory-traversal(30558) vdb-entry
- 23129 third-party-advisory