CVE-2006-4191

XMB Software Extreme Message Board < 1.9.6 - Path Traversal

Title source: rule

Description

Directory traversal vulnerability in memcp.php in XMB (Extreme Message Board) 1.9.6 and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the langfilenew parameter, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file, which is then included by header.php.

Exploits (1)

exploitdb WORKING POC VERIFIED

by rgod · phpwebappsphp

https://www.exploit-db.com/exploits/2178

View Code ZIP pw:eip

References (9)

[Exploit] http://retrogod.altervista.org/xmb_196_sql.html

[Exploit, Vendor Advisory] http://secunia.com/advisories/21293

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/archive/1/443167/100/0/threaded

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/19494

[Exploit] http://www.securityfocus.com/bid/19501

[Various Sources] https://docs.xmbforum2.com/index.php?title=Security_Issue_History

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/28356

[Exploit, Third Party Advisory] https://www.exploit-db.com/exploits/2178

[Third Party Advisory] http://securityreason.com/securityalert/1411

Scores

EPSS 0.1405

EPSS Percentile 94.4%

Details

Status published

Products (1)

xmb_software/extreme_message_board < 1.9.6

Published Aug 17, 2006

Tracked Since Feb 18, 2026