critical10.0Public exploit code
CVE-2006-6568
Directory traversal vulnerability in includes/kb_constants.php in the Knowledge Base (mx_kb) 2.0.2 module for mxBB allows remote attackers to include arbitrary…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- mxBB Module kb_mods 2.0.2 - Remote File Inclusion2006-12-12 · webapps · php · Verified
Impact
Directory traversal vulnerability in includes/kb_constants.php in the Knowledge Base (mx_kb) 2.0.2 module for mxBB allows remote attackers to include arbitrary files via a .. (dot dot) sequence in the phpEx parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mxbb | Kb Mods | Version 2.0.2 |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/23356
- http://www.securityfocus.com/bid/21577
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30857
- https://www.exploit-db.com/exploits/2924
- http://secunia.com/advisories/23356
- http://www.securityfocus.com/bid/21577
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30857
- https://www.exploit-db.com/exploits/2924