CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
What the vulnerability does
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in MinHyeong Lim MH Board mh-board allows PHP Local File Inclusion.This issue affects MH Board: from n/a through <= 1.3.2.1.
Explanation of Vulnerability in Simple Terms
MH Board versions 1.3.2.1 and earlier contain a path traversal vulnerability that allows an attacker to read or write arbitrary files on the server. The vulnerability requires user interaction—the victim must visit a malicious link or page. An attacker can access sensitive files, modify site content, or potentially execute code by uploading malicious files to unprotected directories.
What an attacker can do
Read, write, or delete arbitrary files on the server by traversing the directory structure.
Potential impact on your site
Attackers can steal configuration files, database credentials, or user data; modify or delete site files; or upload malicious code.
Conditions required to exploit
Network access and user interaction required; victim must click a malicious link or visit an attacker-controlled page.
Key dates
External resources
Related vulnerabilities
