CVE-2009-0592: Multiple directory traversal vulnerabilities in PNphpBB2 1.2i and earlier allow remote attackers to include...

Security readout for executives and security teams

PNphpBB2 1.2i and earlier can let a remote attacker abuse an admin parameter to include local files. The source says those files may be executed, which can become serious if the old forum software is still reachable. Evidence is old and incomplete, so confirm actual deployments before escalating broadly. Likely limited to legacy PNphpBB2 installations at version 1.2i or earlier, especially internet-facing forum admin paths. The bundle does not identify broader affected products, CPEs, or maintained forks. Treat as high priority only where legacy PNphpBB2 is still online. The vulnerability class is serious, but business exposure is probably narrow because the affected software is old and niche. Mitigation focus: Inventory PNphpBB2 deployments and identify versions 1.2i or earlier.; Check vendor or project guidance before applying any assumed patch.; Restrict public access to PNphpBB2 admin paths where still deployed..

Prepared

Jun 28, 2026, 11:23 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.