CVE-2007-6624

Directory traversal vulnerability in printview.php in PNphpBB2 1.2i and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the phpEx parameter.

Affected products

Pnphpbb2

Pnphpbb

= 1.2.0_i

Fix

Available

CVSS 2.0

6.8 MEDIUM

EPSS

1.9% (78th percentile)

Weakness

CWE-22

NVD status

Modified

Published

2008-01-04