Secunia

A vulnerability has been reported in YABB SE, which can be exploited by malicious, registered users to compromise a vulnerable system.

The vulnerability is caused due to an input validation error making it possible to supply arbitrary paths to files in the variable "$language". This can be exploited by supplying a path to a malicious file on a remote server, which can result in execution of arbitrary code on the vulnerable system.

The vulnerability can also be exploited to access arbitrary files on the vulnerable system with the privileges of the web service if "safe_mode" has been disabled.

Solution
Update to version 1.5.2:
Further details available in Customer Area

Provided and/or discovered by
Fermín J. Serna

Original Advisory
http://www.ngsec.com/docs/advisories/NGSEC-2003-5.txt

Deep Links
Links available in Customer Area