CVE

Id
22618  
CVE No.
CVE-2006-6514  
Status
Candidate  
Description
Winamp Web Interface (Wawi) 7.5.13 and earlier uses an insufficient comparison to determine whether a directory is located below the application"s root directory, which allows remote authenticated users to access certain other directories if the name of the root directory is a substring of the name of the target directory, as demonstrated by accessing C:folder2 when the root directory is C:folder.  
Phase
Assigned (20061213)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
219131 22618 CVE-2006-6514 BUGTRAQ:20061210 Multiple vulnerabilities in Winamp Web Interface 7.5.13  View
219132 22618 CVE-2006-6514 URL:http://www.securityfocus.com/archive/1/archive/1/454059/100/0/threaded  View
219133 22618 CVE-2006-6514 FULLDISC:20061210 Multiple vulnerabilities in Winamp Web Interface 7.5.13  View
219134 22618 CVE-2006-6514 URL:http://lists.grok.org.uk/pipermail/full-disclosure/2006-December/051217.html  View
219135 22618 CVE-2006-6514 MISC:http://aluigi.altervista.org/adv/wawix-adv.txt  View
219136 22618 CVE-2006-6514 BID:21539  View
219137 22618 CVE-2006-6514 URL:http://www.securityfocus.com/bid/21539  View
219138 22618 CVE-2006-6514 VUPEN:ADV-2006-4935  View
219139 22618 CVE-2006-6514 URL:http://www.vupen.com/english/advisories/2006/4935  View
219140 22618 CVE-2006-6514 SECTRACK:1017362  View
219141 22618 CVE-2006-6514 URL:http://securitytracker.com/id?1017362  View
219142 22618 CVE-2006-6514 SECUNIA:23292  View
219143 22618 CVE-2006-6514 URL:http://secunia.com/advisories/23292  View
219144 22618 CVE-2006-6514 SREASON:2032  View
219145 22618 CVE-2006-6514 URL:http://securityreason.com/securityalert/2032  View
219146 22618 CVE-2006-6514 XF:winampwi-multiple-information-disclosure(30830)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
60293 JVNDB-2006-002559 KDPics における PHP リモートファイルインクルージョンの脆弱性 KDPics には、PHP リモートファイルインクルージョンの脆弱性が存在します。 CVE-2006-6516 22618 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-002559.html  View