NVD

Id
61455  
Name
CVE-2006-2770  
Description
Directory traversal vulnerability in randompic.php in pppBLOG 0.3.8 and earlier, when register_globals is enabled, allows remote attackers to read arbitrary files via a .. (dot dot) sequence in an index of the "file" array parameter, as demonstrated by file[0].  
Reject
 
CVSS Version
2  
CVSS Score
5.4  
Severity
Medium  
CVSS Base Score
5.4  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:C/I:N/A:N)  
Pub Date
2016-12-20  
Published
2006-06-02  
Modified Date
2011-03-07  
Seq
2006-2770  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
317588 61455 CVE-2006-2770 http://retrogod.altervista.org/pppblog_038_xpl.html  View
317589 61455 CVE-2006-2770 1015  View
317590 61455 CVE-2006-2770 1016198  View
317591 61455 CVE-2006-2770 20060530 pppBlog <= 0.3.8 administrative credentials/system disclosure  View
317592 61455 CVE-2006-2770 18189  View
317593 61455 CVE-2006-2770 ADV-2006-2085  View
317594 61455 CVE-2006-2770 pppblog-randompic-directory-traversal(26969)  View

Related JVN