Total vulnerabilities in the database
Directory traversal vulnerability in unb_lib/abbc.conf.php in Unclassified NewsBoard (UNB) 1.6.1 patch 1 and earlier, when register_globals is enabled, allows remote attackers to include arbitrary files via .. (dot dot) sequences and a trailing null byte (%00) in the ABBC[Config][smileset] parameter to unb_lib/abbc.css.php.
| Software | From | Fixed in |
|---|---|---|
| unclassified_newsboard / unclassified_newsboard | 1.5.3a | 1.5.3a.x |
| unclassified_newsboard / unclassified_newsboard | - | 1.6.1_patch1.x |
| unclassified_newsboard / unclassified_newsboard | 1.5.3 | 1.5.3.x |
| unclassified_newsboard / unclassified_newsboard | 1.5.3_patch3 | 1.5.3_patch3.x |
| unclassified_newsboard / unclassified_newsboard | 1.6.1 | 1.6.1.x |