CVE-2007-3272

Minibb - Path Traversal

Title source: rule

Description

Directory traversal vulnerability in index.php in MiniBB 2.0.5 allows remote attackers to read arbitrary files via a .. (dot dot) in the language parameter in a register action.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Dj7xpl · phpwebappsphp

https://www.exploit-db.com/exploits/4076

View Code ZIP pw:eip

References (4)

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/24503

[Exploit, Third Party Advisory] https://www.exploit-db.com/exploits/4076

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/34920

[Third Party Advisory, VDB Entry] http://osvdb.org/38469

Scores

EPSS 0.0609

EPSS Percentile 90.8%

Details

Status published

Products (1)

minibb/minibb 2.0.5

Published Jun 19, 2007

Tracked Since Feb 18, 2026