|
UBBCentral UBB.Threads Local File Include Vulnerability
UBB.Threads is prone to a local file include vulnerability. The problem presents itself when an attacker passes the location of a potentially malicious local script through a parameter of the cookie. An attacker may leverage this issue to execute arbitrary server-side script code that resides on an affected computer with the privileges of the Web server process. This may potentially facilitate unauthorized access. It should be noted that this issue may also be leveraged to read arbitrary files on an affected computer with the privileges of the Web server. |
|
|
Privacy Statement |
