← Back

CVE-2006-3954

nvd nist
Published: Aug 1, 2006Modified: Apr 16, 2026

JSON object

Loading...
5.0
Vector
AV:N/AC:L/Au:N/C:P/I:N/A:N
Exploitability: 10.0 / Impact: 2.9
Source: NVD

Description

Directory traversal vulnerability in usercp.php in MyBB (aka MyBulletinBoard) 1.x allows remote attackers to read arbitrary files via a .. (dot dot) in the gallery parameter in a (1) avatar or (2) do_avatar action.

Affected (26)

Mybulletinboard
1 product
Mybulletinboard
Configuration A
26 vulnerable
Vulnerable SoftwareAffected Versions
Mybulletinboard
Mybulletinboard
Version 1.0.1
Mybulletinboard
Version 1.0.2
Mybulletinboard
Version 1.0.3
Mybulletinboard
Version 1.0.4
Mybulletinboard
Version 1.00_rc1
Mybulletinboard
Version 1.00_rc2
Mybulletinboard
Version 1.00_rc3
Mybulletinboard
Version 1.00_rc4
Mybulletinboard
Version 1.00_rc4_security_patch
Mybulletinboard
Version 1.01
Mybulletinboard
Version 1.04
Mybulletinboard
Version 1.0_final
Mybulletinboard
Version 1.0_pr2
Mybulletinboard
Version 1.0_preview_release_2
Mybulletinboard
Version 1.0_rc2
Mybulletinboard
Version 1.0_rc4
Mybulletinboard
Version 1.1.1
Mybulletinboard
Version 1.1.2
Mybulletinboard
Version 1.1.3
Mybulletinboard
Version 1.1.4
Mybulletinboard
Version 1.1.5
Mybulletinboard
Version 1.1.7
Mybulletinboard
Version 1.10
Mybulletinboard
Version 1.14
Mybulletinboard
Version 1.1
Mybulletinboard
Version 1.20

References (6)

Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Exploit
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Exploit

Timeline

No history available yet.