Nms

Name of the Vulnerable Software and Affected Versions: PunBB versions prior to 1.2.14 Description: The issue allows remote authenticated users to include and execute arbitrary local files via a .. (dot dot) in the `language` parameter. This is related to the register.php file storing a language value in the users table. Recommendations: For versions prior to 1.2.14, update to version 1.2.14 or later to resolve the issue. As a temporary workaround, consider restricting access to the include/common.php file and the register.php file to minimize the risk of exploitation. Avoid using the `language` parameter in affected API endpoints until the issue is resolved.