CVE-2006-0494 - CERT CVE
ID CVE-2006-0494
Sažetak Directory traversal vulnerability in MyBB (aka MyBulletinBoard) 1.02 allows local users with MyBB administrative privileges to include and possibly execute arbitrary local files via directory traversal sequences and a nul (%00) character in the plugin parameter.
Reference
CVSS
Base: 4.3
Impact: 6.4
Exploitability:3.1
Pristup
VektorSloženostAutentikacija
LOCAL LOW SINGLE
Impact
PovjerljivostCjelovitostDostupnost
PARTIAL PARTIAL PARTIAL
CVSS vektor AV:L/AC:L/Au:S/C:P/I:P/A:P
Zadnje važnije ažuriranje 19-10-2018 - 15:45
Objavljeno 01-02-2006 - 02:02