CVE-2008-5943

NavBoard 16 (2.6.0) - Path Traversal

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 2 public exploits for CVE-2008-5943. PoCs published by CraCkEr.

AI-analyzed exploit summary The provided text describes a local file inclusion (LFI) and cross-site scripting (XSS) vulnerability in Navboard 16. It outlines the potential impact but does not include functional exploit code.

Description

Multiple directory traversal vulnerabilities in NavBoard 16 (2.6.0) allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the module parameter to (1) admin_modules.php and (2) modules.php.

Exploits (2)

exploitdb WRITEUP VERIFIED
by CraCkEr · textwebappsphp
https://www.exploit-db.com/exploits/32247

The provided text describes a local file inclusion (LFI) and cross-site scripting (XSS) vulnerability in Navboard 16. It outlines the potential impact but does not include functional exploit code.

Classification
Writeup 90%
Attack Type
Info Leak | Xss
Complexity
Trivial
Reliability
Theoretical
Target: Navboard 16
No auth needed
Prerequisites: Access to the vulnerable Navboard application
devstral-2 · analyzed Feb 16, 2026 Full analysis →
exploitdb WRITEUP VERIFIED
by CraCkEr · textwebappsphp
https://www.exploit-db.com/exploits/32246

The provided text describes a local file inclusion (LFI) and cross-site scripting (XSS) vulnerability in Navboard 16. It outlines the potential impact but does not include functional exploit code.

Classification
Writeup 90%
Attack Type
Info Leak | Xss
Complexity
Trivial
Reliability
Theoretical
Target: Navboard 16
No auth needed
Prerequisites: Access to the vulnerable web application
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (4)

Core 4
Core References
Exploit vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/30687
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/44450
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/31463

Scores

EPSS 0.0256
EPSS Percentile 83.1%

Details

CWE
CWE-22
Status published
Products (1)
navboard/navboard 16
Published Jan 22, 2009
Tracked Since Feb 18, 2026