CVE-2007-1842
Directory traversal vulnerability in login.php in JSBoard before 2.0.12 allows remote attackers...
CVE-2007-1842 is a high vulnerability (CVSS 7.5) in Jsboard, published April 3, 2007. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 7.69%, the 94th percentile. No source names a fixed version.
- Severity
- 7.5 HighCVSS 2.0, NVD
- Exploit chance
- 7.69%EPSS, 94th percentile
- Exploitation
- None known1 public exploit
- Fixed in
- No fix listedNo source names one
Description
Directory traversal vulnerability in login.php in JSBoard before 2.0.12 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the table parameter, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file, a related issue to CVE-2006-2019.
Exploit likelihood
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | JSBoard 2.0.10 - 'login.php?table' Local File Inclusion | 2007-03-30 |
What each source reports
NVD Score used
Directory traversal vulnerability in login.php in JSBoard before 2.0.12 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the table parameter, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file, a related issue to CVE-2006-2019.
- Record
CVE-2007-1842- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE ListNo score
Directory traversal vulnerability in login.php in JSBoard before 2.0.12 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the table parameter, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file, a related issue to CVE-2006-2019.
- Record
CVE-2007-1842- Updated
- 2026-11-02
EUVDEUVD-2007-1836No score
Directory traversal vulnerability in login.php in JSBoard before 2.0.12 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the table parameter, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file, a related issue to CVE-2006-2019.
- Record
EUVD-2007-1836- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-rxfg-3q5p-g4xvNo score
Directory traversal vulnerability in login.php in JSBoard before 2.0.12 allows remote attackers...
Directory traversal vulnerability in login.php in JSBoard before 2.0.12 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the table parameter, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file, a related issue to CVE-2006-2019.
- Record
GHSA-rxfg-3q5p-g4xv- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
kldp.net/plugins/scmcvs/cvsweb.php/jsboard-2/login.php.diff?r1=1.8%3Br2=1.9%3Bcvsroot=jsboard
exploit-db.com/exploits/3614
osvdb.org/37365
exchange.xforce.ibmcloud.com/vulnerabilities/33338
securityfocus.com/bid/23223
vupen.com/english/advisories/2007/1182
nvd.nist.gov/vuln/detail/CVE-2007-1842
github.com/advisories/GHSA-rxfg-3q5p-g4xv