Description

Directory traversal vulnerability in inc/class_language.php in MyBB before 1.2.13 has unknown impact and attack vectors related to the $language variable.

Remediation

References

CVE-2008-3071

Related Vulnerabilities

WordPress Plugin WP smart CRM & Invoices FREE Cross-Site Scripting (1.8.7)

OpenVPN AS Improper Authentication Vulnerability (CVE-2020-8953)

Ruby Other Vulnerability (CVE-2016-2336)

WordPress 'press-this.php' Multiple Cross-Site Scripting Vulnerabilities (2.0 - 2.5.1)

Apache HTTP Server Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2007-6388)

Severity

High

Classification

CVE-2008-3071 CWE-22

Tags

Missing Update Known Vulnerabilities