CVE

Id
22798  
CVE No.
CVE-2006-6694  
Status
Candidate  
Description
Directory traversal vulnerability in include/config.php in E-Uploader Pro 1.0 and earlier allows remote attackers to execute arbitrary PHP code via a .. (dot dot) in the language parameter, as demonstrated by uploading a .JPG file containing PHP code, then accessing the file via config.php.  
Phase
Assigned (20061221)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
220417 22798 CVE-2006-6694 MILW0RM:2556  View
220418 22798 CVE-2006-6694 URL:http://milw0rm.com/exploits/2556  View
220419 22798 CVE-2006-6694 MISC:http://www.rahim.webd.pl/exploity/Exploits/99.txt  View
220420 22798 CVE-2006-6694 BID:20481  View
220421 22798 CVE-2006-6694 URL:http://www.securityfocus.com/bid/20481  View
220422 22798 CVE-2006-6694 SECUNIA:22314  View
220423 22798 CVE-2006-6694 URL:http://secunia.com/advisories/22314  View
220424 22798 CVE-2006-6694 XF:euploaderpro-config-file-include(29574)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
58680 JVNDB-2006-000945 Microsoft Windows の CSRSS における HardError エラーメッセージ処理によるメモリ二重解放の脆弱性 Microsoft Windows には、Client Server Runtime Subsystem (CSRSS) プロセスでの HardError エラーメッセージ処理の不備により、メモリの二重解放が発生する脆弱性が存在します。 CVE-2006-6696 22798 9.3 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000945.html  View