Security Advisory
CVE-2006-0494
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
Directory traversal vulnerability in MyBB (aka MyBulletinBoard) 1.02 allows local users with MyBB administrative privileges to include and possibly execute arbitrary local files via directory traversal sequences and a nul (%00) character in the plugin parameter.