source: wwwsecurityfocuscom/bid/1668/info
YaBBpl, a web-based bulletin board script, stores board postings in numbered text files The numbered file name is specified in the call to YaBBpl in the variable num=<file> Before retrieving the file, YaBB will append a txt extension to <file>
Due to input validation problems in ...