• info
• discussion
• exploit
• solution
• references

XennoBB Profile.PHP Directory Traversal Vulnerability

Attackers may exploit this vulnerability via a web client.

The following proof of concept is available:

• /data/vulnerabilities/exploits/XennoBBDirectoryTraversalAugust082006.html