CVE-2006-0494: Medium severity mybulletinboard mybulletinboard vulnerability
Published Feb 1, 2006
·Updated
Directory traversal vulnerability in MyBB (aka MyBulletinBoard) 1.02 allows local users with MyBB administrative privileges to include and possibly execute arbitrary local files via directory traversal sequences and a nul (%00) character in the plugin parameter.
Affected Software
1 affected component
MyBulletinBoard MyBulletinBoard=1.0.2
Event History
Feb 1, 2006
CVE Published
02:02 AM
CVE Published
via MITRE·07:00 AM
Data Sourced
via MITRE·07:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2006-0494?
CVE-2006-0494 is classified as a medium severity vulnerability.
2
How do I fix CVE-2006-0494?
To fix CVE-2006-0494, upgrade MyBB to the latest version that addresses this vulnerability.
3
Who is affected by CVE-2006-0494?
CVE-2006-0494 affects local users with administrative privileges in MyBB version 1.0.2.
4
What kind of vulnerability is CVE-2006-0494?
CVE-2006-0494 is a directory traversal vulnerability that allows inclusion of arbitrary local files.
5
Can CVE-2006-0494 lead to remote code execution?
Yes, CVE-2006-0494 can potentially lead to remote code execution by executing arbitrary local files.