CVSS: 7.5EPSS: 2%CPEs: 11EXPL: 2CVE-2009-0592 – PNPHPBB2 < 1.2i - 'ModName' Multiple Local File Inclusions
https://notcve.org/view.php?id=CVE-2009-0592
Multiple directory traversal vulnerabilities in PNphpBB2 1.2i and earlier allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the ModName parameter to (1) admin_words.php, (2) admin_groups_reapir.php, (3) admin_smilies.php, (4) admin_ranks.php, (5) admin_styles.php, and (6) admin_users.php in admin/. Múltiples vulnerabilidades de salto de directorio en PNphpBB2 1.2i y anteriores permiten a atacantes remotos incluir y ejecutar archivos locales a través de un .. (punto punto) en el parámetro ModName de (1) admin_words.php, (2) admin_groups_reapir.php, (3) admin_smilies.php, (4) admin_ranks.php, (5) admin_styles.php, y (6) admin_users.php en admin/. • https://www.exploit-db.com/exploits/7658 http://secunia.com/advisories/33365 http://www.securityfocus.com/bid/33103 • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •
CVSS: 6.8EPSS: 1%CPEs: 1EXPL: 2CVE-2007-6624 – PNPHPBB2 < 1.2i - 'PHPEx' Local File Inclusion
https://notcve.org/view.php?id=CVE-2007-6624
Directory traversal vulnerability in printview.php in PNphpBB2 1.2i and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the phpEx parameter. Vulnerabilidad de salto de directorio en printview.php de PNphpBB2 1.2i y anteriores permite a atacantes remotos incluir y ejecutar archivos locales de su elección mediante un .. (punto punto) en el parámetro phpEx. • https://www.exploit-db.com/exploits/4796 http://irk4z.wordpress.com/2007/12/27/pnphpbb2-12i-printviewphp-phpex-local-file-inclusion-vuln http://osvdb.org/39879 http://www.securityfocus.com/bid/27039 https://exchange.xforce.ibmcloud.com/vulnerabilities/39243 • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •