Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 20/06/2007 Updated: 16/10/2018

CVSS v2 Base Score: 6.5 | Impact Score: 6.4 | Exploitability Score: 8

VMScore: 578

Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P

Directory traversal vulnerability in Yet another Bulletin Board (YaBB) 2.1 and previous versions allows remote authenticated users to execute arbitrary Perl code via a .. (dot dot) in the userlanguage profile setting, which sets the userlanguage key of the member hash, and is propagated to the language variable in (1) HelpCentre.pl and (2) ICQPager.pl, (3) the use_lang variable in Subs.pl, and the actlang variable in (4) Post.pl and (5) InstantMessage.pl; as demonstrated by pointing userlanguage to the English folder, modifying English/HelpCentre.lng file to contain Perl statements, and then invoking the help action in YaBB.pl.

Vulnerable Product	Search on Vulmon	Subscribe to Product
yabb yabb 2.0_rc2
yabb yabb 2.1
yabb yabb 2.0
yabb yabb 2.0_rc1

NVD-CWE-Other http://www.securityfocus.com/bid/24529 http://secunia.com/advisories/25734 http://securityreason.com/securityalert/2818 http://osvdb.org/37238 https://exchange.xforce.ibmcloud.com/vulnerabilities/34932 http://www.securityfocus.com/archive/1/471733/100/0/threaded https://nvd.nist.gov

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2007-3295

Vulnerability Summary

References

Vulmon Search

About

Products

Connect