Vulnerabilities > CVE-2007-1906

047910
CVSS 0.0 - NONE
Attack vector
UNKNOWN
Attack complexity
UNKNOWN
Privileges required
UNKNOWN
Confidentiality impact
UNKNOWN
Integrity impact
UNKNOWN
Availability impact
UNKNOWN
ecardmax-com
mybb
exploit available
NVD
Published: 2007-04-10
Updated: 2024-11-21

Summary

Directory traversal vulnerability in richedit/keyboard.php in eCardMAX HotEditor (Hot Editor) 4.0, and the HotEditor plugin for MyBB, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the first parameter.

Vulnerable Configurations

Part Description Count
Application
Ecardmax.Com
1
Application
Mybb
1

Exploit-Db

descriptioneCardMAX HotEditor 4.0 Keyboard.PHP Local File Include Vulnerability. CVE-2007-1906 . Webapps exploit for php platform
idEDB-ID:29827
last seen2016-02-03
modified2007-04-09
published2007-04-09
reporterLiz0ziM
sourcehttps://www.exploit-db.com/download/29827/
titleeCardMAX HotEditor 4.0 Keyboard.PHP Local File Include Vulnerability

References