CVE-2007-1842: Jsboard

High severity, CVSS 7.5. EPSS: 7.5% chance of exploitation in the next 30 days.

Directory traversal vulnerability in login.php in JSBoard before 2.0.12 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the table parameter, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file, a related issue to CVE-2006-2019.

Affected products

  • Jsboard Jsboard: up to and including 2.0.11

Published 2007-04-03. Last modified 2026-06-16.