YaBB search.pl Arbitrary Command Execution Vulnerability

An attacker could easily create a malicious html form with a catsearch such as:
./../../../../../usr/bin/touch%20/tmp/foo|

(excerpted from bugtraq posting by rpc <h@ckz.org>)


 

Privacy Statement
Copyright 2010, SecurityFocus