CVE-2009-2600

Webboard 2.90 beta - Path Traversal

Title source: llm
STIX 2.1

Description

Multiple directory traversal vulnerabilities in view.php in Webboard 2.90 beta and earlier allow remote attackers to read arbitrary files via a .. (dot dot) in the topic parameter.

Exploits (2)

exploitdb WORKING POC VERIFIED
by MrDoug · textwebappsphp
https://www.exploit-db.com/exploits/8823
exploitdb WORKING POC VERIFIED
by MrDoug · textwebappsphp
https://www.exploit-db.com/exploits/34940

References (2)

Core 2
Core References
Exploit, Third Party Advisory exploit x_refsource_exploit-db
http://www.exploit-db.com/exploits/8823
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/50861

Scores

EPSS 0.0301
EPSS Percentile 86.7%

Details

CWE
CWE-22
Status published
Products (1)
akiva/webboard < 2.90
Published Jul 27, 2009
Tracked Since Feb 18, 2026