ByteOS Network

CVE Vulnerability Details :

CVE-2006-0434

PUBLISHED

More Info Official Page

Assigner-mitre

Assigner Org ID-8254265b-2729-46b6-b9e3-3dfca2d5bfca

Published At-26 Jan, 2006 | 11:00

Updated At-07 Aug, 2024 | 16:34

▼CVE Numbering Authority (CNA)

Directory traversal vulnerability in action.php in phpXplorer allows remote attackers to read arbitrary files via ".." (dot dot) sequences and null bytes in the sAction parameter, a different vulnerability than CVE-2006-0244. NOTE: if the functionality of phpXplorer supports the upload of PHP files, then this issue would not cross privilege boundaries and would not be a vulnerability.

Affected Products

Vendor

n/a

Product

n/a

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	n/a

References

Hyperlink	Resource
https://exchange.xforce.ibmcloud.com/vulnerabilities/39982	vdb-entry x_refsource_XF
http://www.securityfocus.com/archive/1/422434/100/0/threaded	mailing-list x_refsource_BUGTRAQ
http://www.securityfocus.com/bid/16292	vdb-entry x_refsource_BID

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://exchange.xforce.ibmcloud.com/vulnerabilities/39982	vdb-entry x_refsource_XF x_transferred
http://www.securityfocus.com/archive/1/422434/100/0/threaded	mailing-list x_refsource_BUGTRAQ x_transferred
http://www.securityfocus.com/bid/16292	vdb-entry x_refsource_BID x_transferred

Affected Products

Affected

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

Affected Products

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References