CVE-2007-1842

Directory traversal vulnerability in login.php in JSBoard before 2.0.12 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the table parameter, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file, a related issue to CVE-2006-2019.

Link	Resource
http://kldp.net/plugins/scmcvs/cvsweb.php/jsboard-2/login.php.diff?r1=1.8;r2=1.9;cvsroot=jsboard	Exploit
http://www.securityfocus.com/bid/23223	Exploit
http://osvdb.org/37365
http://www.vupen.com/english/advisories/2007/1182
https://exchange.xforce.ibmcloud.com/vulnerabilities/33338
https://www.exploit-db.com/exploits/3614

Configuration 1

cpe:2.3:a:jsboard:jsboard:*:*:*:*:*:*:*:*

---

Published : 2007-04-03 04:19

Updated : 2017-10-11 01:32

---

NVD link : CVE-2007-1842

Mitre link : CVE-2007-1842

No products.

NVD-CWE-Other