CVE-2009-0290: Directory traversal vulnerability in common.php in SIR GNUBoard 4.31.03 allows remote attackers to include...

Security readout for executives and security teams

CVE-2009-0290 is a file inclusion flaw in SIR GNUBoard 4.31.03. A remote attacker could influence a path parameter and cause the application to include local files. In some environments, the sources state this may become remote code execution. No source bundle evidence shows active exploitation. Exposure is likely limited to legacy SIR GNUBoard 4.31.03 deployments reachable by untrusted users. The affected data in the bundle is sparse, so teams should confirm product name, version, and public routes from local inventories. Prioritize any internet-facing GNUBoard 4.31.03 instance. The business risk is potential server compromise, but urgency depends on whether the legacy software is present and exposed. No active exploitation evidence is provided. Mitigation focus: Inventory all GNUBoard deployments and confirm whether version 4.31.03 is present.; Check vendor or archived advisory guidance for fixed versions or official remediation.; Restrict public access to affected instances until remediation is confirmed..

Prepared

Jun 28, 2026, 11:23 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.