Description
Directory traversal vulnerability in MyBB (aka MyBulletinBoard) 1.02 allows local users with MyBB administrative privileges to include and possibly execute arbitrary local files via directory traversal sequences and a nul (%00) character in the plugin parameter.
Analysis and contextual insights are available on OpenCVE Cloud.
Remediation
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
Debian DSA |
DSA-1254-1 | New bind9 packages fix denial of service |
EUVD |
EUVD-2006-0501 | Directory traversal vulnerability in MyBB (aka MyBulletinBoard) 1.02 allows local users with MyBB administrative privileges to include and possibly execute arbitrary local files via directory traversal sequences and a nul (%00) character in the plugin parameter. |
References
History
No history.
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2024-08-07T16:34:14.827Z
Reserved: 2006-01-31T00:00:00.000Z
Link: CVE-2006-0494
No data.
Status : Modified
Published: 2006-02-01T02:02:00.000
Modified: 2026-04-16T00:27:16.627
Link: CVE-2006-0494
No data.
OpenCVE Enrichment
No data.
Weaknesses
Debian DSA
EUVD