CVE-2007-6397: Flat PHP Board

Medium severity, CVSS 5.0. EPSS: 2.8% chance of exploitation in the next 30 days.

Multiple directory traversal vulnerabilities in index.php in Flat PHP Board 1.2 and earlier allow remote attackers to (1) create arbitrary files via a .. (dot dot) in the username parameter when registering a user account, and (2) read arbitrary PHP files via a .. (dot dot) in (a) the topic parameter in a topic action or (b) the username parameter in a viewprofile action.

Affected products

• Flat PHP Board: up to and including 1.2

Published 2007-12-17. Last modified 2026-06-16.