CVE-2009-2787

PunBB <2.2.4 - Path Traversal

Title source: llm

Description

Directory traversal vulnerability in include/reputation/rep_profile.php in the Reputation plugin 2.2.4, 2.2.3, 2.0.4, and earlier for PunBB, when register_globals is enabled and magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the pun_user[language] parameter.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Dante90 · perlwebappsphp

https://www.exploit-db.com/exploits/9315

View Code ZIP pw:eip

References (5)

[Exploit] http://packetstormsecurity.org/0907-exploits/punbbrep-lfi.txt

[Vendor Advisory] http://secunia.com/advisories/36020

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/52138

[Exploit, Third Party Advisory] http://www.exploit-db.com/exploits/9315

[Third Party Advisory, VDB Entry] http://osvdb.org/56613

Scores

EPSS 0.0214

EPSS Percentile 84.3%

Details

CWE

CWE-22

Status published

Products (3)

reputation/reputation 2.0.4

reputation/reputation 2.2.3

reputation/reputation < 2.2.4

Published Aug 17, 2009

Tracked Since Feb 18, 2026