CVE-2009-0592

PNphpBB2 <1.2i - Path Traversal

Title source: llm

Description

Multiple directory traversal vulnerabilities in PNphpBB2 1.2i and earlier allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the ModName parameter to (1) admin_words.php, (2) admin_groups_reapir.php, (3) admin_smilies.php, (4) admin_ranks.php, (5) admin_styles.php, and (6) admin_users.php in admin/.

Exploits (1)

exploitdb WORKING POC VERIFIED
by StAkeR · perlwebappsphp
https://www.exploit-db.com/exploits/7658

References (3)

Scores

EPSS 0.4907
EPSS Percentile 97.8%

Details

CWE
CWE-22
Status published
Products (11)
pnphpbb/pnphpbb2 1.0
pnphpbb/pnphpbb2 1.1
pnphpbb/pnphpbb2 1.1a
pnphpbb/pnphpbb2 1.2
pnphpbb/pnphpbb2 1.2a
pnphpbb/pnphpbb2 1.2d
pnphpbb/pnphpbb2 1.2e
pnphpbb/pnphpbb2 1.2f
pnphpbb/pnphpbb2 1.2g
pnphpbb/pnphpbb2 1.2h rc3b
... and 1 more
Published Feb 16, 2009
Tracked Since Feb 18, 2026