CVE-2007-6397

CVE-2007-6397 describes multiple directory traversal vulnerabilities in Flat PHP Board versions 1.2 and earlier. Attackers can exploit these flaws to create arbitrary files on the server by manipulating the username parameter during user registration, or to read arbitrary PHP files by injecting directory traversal sequences into the topic or username parameters in specific actions. This vulnerability carries a CVSS score of 5.0, indicating a medium severity with low attack complexity and no authentication required, potentially leading to unauthorized file creation or information disclosure. While not listed in the KEV catalog, public exploit code is available via ExploitDB, though there is no evidence of active exploitation, Metasploit modules, or significant community discussion or media coverage.