NVD

Id
58984  
Name
CVE-2006-0244  
Description
** DISPUTED ** Directory traversal vulnerability in workspaces.php in phpXplorer 0.9.33 allows remote attackers to include arbitrary files via a .. (dot dot) and trailing null byte (%00) in the sShare parameter. NOTE: a followup post claims that this is not a vulnerability since the functionality of phpXplorer supports the upload of PHP files, which would not cross privilege boundaries since the PHP functionality would support read access outside the web root.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:P/A:N)  
Pub Date
2016-12-20  
Published
2006-01-17  
Modified Date
2011-03-07  
Seq
2006-0244  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
302928 58984 CVE-2006-0244 353  View
302929 58984 CVE-2006-0244 http://www.arrelnet.com/advisories/adv20060116.html  View
302930 58984 CVE-2006-0244 20060116 Directory traversal in phpXplorer  View
302931 58984 CVE-2006-0244 20060116 Re: Directory traversal in phpXplorer  View
302932 58984 CVE-2006-0244 16263  View
302933 58984 CVE-2006-0244 ADV-2006-0232  View
302934 58984 CVE-2006-0244 phpxplorer-sshare-directory-traversal(39982)  View

Related JVN