CVE-2006-4191
First published: Thu Aug 17 2006(Updated: )
Directory traversal vulnerability in memcp.php in XMB (Extreme Message Board) 1.9.6 and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the langfilenew parameter, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file, which is then included by header.php.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Xmb Software Extreme Message Board | <=1.9.6 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://retrogod.altervista.org/xmb_196_sql.html
- http://www.securityfocus.com/bid/19501
- http://secunia.com/advisories/21293
- http://www.securityfocus.com/bid/19494
- http://securityreason.com/securityalert/1411
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28356
- https://www.exploit-db.com/exploits/2178
- http://www.securityfocus.com/archive/1/443167/100/0/threaded
- https://docs.xmbforum2.com/index.php?title=Security_Issue_History
Frequently Asked Questions
What is the severity of CVE-2006-4191?
CVE-2006-4191 is considered a critical vulnerability due to its potential for remote code execution.
How do I fix CVE-2006-4191?
To fix CVE-2006-4191, upgrade to XMB Extreme Message Board version 1.9.7 or later where this vulnerability is patched.
What types of attacks can be performed using CVE-2006-4191?
CVE-2006-4191 allows attackers to exploit directory traversal to include and execute arbitrary local files on the server.
Which versions of XMB are affected by CVE-2006-4191?
CVE-2006-4191 affects XMB (Extreme Message Board) versions 1.9.6 and earlier.
Is CVE-2006-4191 publicly known?
Yes, CVE-2006-4191 is a publicly disclosed vulnerability that has been documented in cybersecurity databases.
- collector/nvd-historical
- collector/nvd-index
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/severity
- agent/last-modified-date
- agent/references
- agent/author
- agent/tags
- agent/event
- agent/description
- agent/first-publish-date
- agent/source
- vendor/xmb software
- canonical/xmb software extreme message board
- version/xmb software extreme message board/1.9.6