YABB Multiple Local File Include Vulnerabilities
BID:24529
Info
YABB Multiple Local File Include Vulnerabilities
| Bugtraq ID: | 24529 |
| Class: | Input Validation Error |
| CVE: |
CVE-2007-3295 |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 19 2007 12:00AM |
| Updated: | May 07 2015 05:37PM |
| Credit: | Maciej `krasza` Kukla is credited with the discovery of these vulnerabilities. |
| Vulnerable: |
YaBB YaBB 2.0 RC1 YaBB YaBB 2.0 RC2 YaBB YaBB 2.0 YaBB YaBB 2.1 YaBB YaBB 2.0 |
| Not Vulnerable: | |
Discussion
YABB Multiple Local File Include Vulnerabilities
YaBB is prone to multiple local file-include vulnerabilities because the application fails to adequately sanitize user-supplied input.
Exploiting these issues may allow an attacker to access potentially sensitive information that may aid in further attacks.
This issue affects YaBB 2.1 and prior versions.
YaBB is prone to multiple local file-include vulnerabilities because the application fails to adequately sanitize user-supplied input.
Exploiting these issues may allow an attacker to access potentially sensitive information that may aid in further attacks.
This issue affects YaBB 2.1 and prior versions.
Exploit / POC
YABB Multiple Local File Include Vulnerabilities
Attackers can use a browser to exploit these issues.
Attackers can use a browser to exploit these issues.
Solution / Fix
YABB Multiple Local File Include Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches for these issues. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches for these issues. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
YABB Multiple Local File Include Vulnerabilities
References:
References: