CVEvulnerability

CVE-2006-2406

2.6 LOW Published 2006-05-16 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2006-05-16
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
2.6 LOW — AV:N/AC:H/Au:N/C:N/I:P/A:N

Description

Directory traversal vulnerability in bb_lib/abbc.css.php in Unclassified NewsBoard (UNB) 1.5.3-d and possibly earlier versions, when register_globals is enabled, allows remote attackers to include arbitrary files via .. (dot dot) sequences and a trailing null byte (%00) in the design_path parameter. NOTE: this is closely related, but a different vulnerability than the ABBC[Config][smileset] parameter.

Affected configurations

• unclassified newsboard unclassified newsboard (<= 1.5.3d)

References