CVE-2006-6262

Directory traversal vulnerability in mboard.php in PHPJunkYard (aka Klemen Stirn) MBoard 1.22 and earlier allows remote attackers to create arbitrary empty files via a .. (dot dot) in the orig_id parameter.

• http://secunia.com/advisories/23129Patch, Vendor Advisory
• http://securityreason.com/securityalert/1988
• http://www.mayhemiclabs.com/advisories/MHL-2006-004.txtPatch, Vendor Advisory
• http://www.mayhemiclabs.com/wiki/wikka.php?wakka=MHL2006004Patch, Vendor Advisory
• http://www.securityfocus.com/archive/1/452772/100/0/threaded
• http://www.securityfocus.com/bid/21304
• http://www.vupen.com/english/advisories/2006/4769
• https://exchange.xforce.ibmcloud.com/vulnerabilities/30558
• http://secunia.com/advisories/23129Patch, Vendor Advisory
• http://securityreason.com/securityalert/1988
• http://www.mayhemiclabs.com/advisories/MHL-2006-004.txtPatch, Vendor Advisory
• http://www.mayhemiclabs.com/wiki/wikka.php?wakka=MHL2006004Patch, Vendor Advisory
• http://www.securityfocus.com/archive/1/452772/100/0/threaded
• http://www.securityfocus.com/bid/21304
• http://www.vupen.com/english/advisories/2006/4769
• https://exchange.xforce.ibmcloud.com/vulnerabilities/30558

Published

Dec 4, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-6256Cross-site scripting (XSS) vulnerability in the file manager…
• CVE-2006-6257The file manager in AlternC 0.9.5 and earlier, when warnings…
• CVE-2006-6258The phpmyadmin subsystem in AlternC 0.9.5 and earlier transm…
• CVE-2006-6259Multiple directory traversal vulnerabilities in (a) class/fu…
• CVE-2006-6260SQL injection vulnerability in login.asp in Redbinaria Siste…
• CVE-2006-6261Buffer overflow in Quintessential Player 4.50.1.82 and earli…
• CVE-2006-6263Teredo clients, when source routing is enabled, recognize a …
• CVE-2006-6264Teredo creates trusted peer entries for arbitrary incoming s…
• CVE-2006-6265Teredo clients, when located behind a restricted NAT, allow …
• CVE-2006-6266Teredo clients, when following item 6 of RFC4380 section 5.2…
• CVE-2006-6267PostNuke 0.7.5.0, and certain minor versions, allows remote …
• CVE-2006-6268SQL injection vulnerability in system/core/profile/profile.i…