CVE-2006-4191

Severity: medium (CVSS 5.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 9.9% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2006-08-17 · updated 2026-06-16

Description

Directory traversal vulnerability in memcp.php in XMB (Extreme Message Board) 1.9.6 and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the langfilenew parameter, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file, which is then included by header.php.

Affected products

Xmb Software Extreme Message Board: through 1.9.6

References

http://retrogod.altervista.org/xmb_196_sql.html
http://secunia.com/advisories/21293
http://securityreason.com/securityalert/1411
http://www.securityfocus.com/archive/1/443167/100/0/threaded
http://www.securityfocus.com/bid/19494
http://www.securityfocus.com/bid/19501
https://docs.xmbforum2.com/index.php?title=Security_Issue_History
https://exchange.xforce.ibmcloud.com/vulnerabilities/28356
https://www.exploit-db.com/exploits/2178
http://retrogod.altervista.org/xmb_196_sql.html
http://secunia.com/advisories/21293
http://securityreason.com/securityalert/1411

Get alerted when CVE-2006-4191 or the next vulnerability affects your stack