CVE

Id
20755  
CVE No.
CVE-2006-4651  
Status
Candidate  
Description
Directory traversal vulnerability in download/index.php, and possibly download.php, in threesquared.net (aka Ben Speakman) Php download allows remote attackers to overwrite arbitrary local files via .. (dot dot) sequence in the file parameter.  
Phase
Assigned (20060908)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
196175 20755 CVE-2006-4651 BUGTRAQ:20060902 php download local file include  View
196176 20755 CVE-2006-4651 URL:http://www.securityfocus.com/archive/1/archive/1/445269/100/0/threaded  View
196177 20755 CVE-2006-4651 BID:19872  View
196178 20755 CVE-2006-4651 URL:http://www.securityfocus.com/bid/19872  View
196179 20755 CVE-2006-4651 VUPEN:ADV-2006-3479  View
196180 20755 CVE-2006-4651 URL:http://www.vupen.com/english/advisories/2006/3479  View
196181 20755 CVE-2006-4651 SECUNIA:21774  View
196182 20755 CVE-2006-4651 URL:http://secunia.com/advisories/21774  View
196183 20755 CVE-2006-4651 SREASON:1528  View
196184 20755 CVE-2006-4651 URL:http://securityreason.com/securityalert/1528  View
196185 20755 CVE-2006-4651 XF:phpdownload-index-file-include(28751)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
58954 JVNDB-2006-001220 Amazing Little Poll における admin パスワードを読まれる脆弱性 (1) Amazing Little Poll および (2) Amazing Little Picture Poll には、不十分なアクセスコントロールで Web ルート下に重要な情報を保存するため、admin パスワードを読まれる脆弱性が存在します。 CVE-2006-4653 20755 5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-001220.html  View