EDB-23774
functionalYaBB SE 1.5.x - Arbitrary File Deletion
view exploit source exploit_dbverifiedtype webappsauthor Alnitak & BackSpacepublished 2004-03-01catalog exploit_db
01
exploited CVEs (1)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2004-0344US | medium6.4 | Exploit | ||
Directory traversal vulnerability in ModifyMessage.php in YaBB SE 1.5.4 through 1.5.5b allows remote attackers to delete arbitrary files via a .. (dot dot) in the attachOld paramet… | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan