CVE

Id
21253  
CVE No.
CVE-2006-5149  
Status
Candidate  
Description
Multiple directory traversal vulnerabilities in OpenBiblio before 0.5.2 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in (1) the page parameter to shared/help.php or (2) the tab parameter to shared/header.php.  
Phase
Assigned (20061002)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
202047 21253 CVE-2006-5149 BUGTRAQ:20071228 OpenBiblio 0.5.2-pre4 and prior multiple vulnerabilities  View
202048 21253 CVE-2006-5149 URL:http://www.securityfocus.com/archive/1/archive/1/485588/100/0/threaded  View
202049 21253 CVE-2006-5149 CONFIRM:http://sourceforge.net/project/shownotes.php?release_id=451780  View
202050 21253 CVE-2006-5149 BID:20301  View
202051 21253 CVE-2006-5149 URL:http://www.securityfocus.com/bid/20301  View
202052 21253 CVE-2006-5149 BID:27053  View
202053 21253 CVE-2006-5149 URL:http://www.securityfocus.com/bid/27053  View
202054 21253 CVE-2006-5149 VUPEN:ADV-2006-3867  View
202055 21253 CVE-2006-5149 URL:http://www.vupen.com/english/advisories/2006/3867  View
202056 21253 CVE-2006-5149 SECUNIA:22238  View
202057 21253 CVE-2006-5149 URL:http://secunia.com/advisories/22238  View
202058 21253 CVE-2006-5149 XF:openbiblio-shared-file-include(29316)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
58395 JVNDB-2006-000591 Ignite-UX を稼動する HP-UX における不正なアクセスを受ける脆弱性 HP-UX に含まれる Ignite-UX Ignite-UX Server を稼動する HP-UX には、詳細不明のセキュリティ上の問題が存在します。 CVE-2006-5151 21253 10 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000591.html  View