CVE-2007-6624 – PNPHPBB2 < 1.2i - 'PHPEx' Local File Inclusion

https://notcve.org/view.php?id=CVE-2007-6624

Directory traversal vulnerability in printview.php in PNphpBB2 1.2i and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the phpEx parameter. Vulnerabilidad de salto de directorio en printview.php de PNphpBB2 1.2i y anteriores permite a atacantes remotos incluir y ejecutar archivos locales de su elección mediante un .. (punto punto) en el parámetro phpEx. • https://www.exploit-db.com/exploits/4796 http://irk4z.wordpress.com/2007/12/27/pnphpbb2-12i-printviewphp-phpex-local-file-inclusion-vuln http://osvdb.org/39879 http://www.securityfocus.com/bid/27039 https://exchange.xforce.ibmcloud.com/vulnerabilities/39243 • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •