5
CVE-2006-4651
- EPSS 1.73%
- Veröffentlicht 09.09.2006 00:04:00
- Zuletzt bearbeitet 16.06.2026 22:29:31
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginDirectory traversal vulnerability in download/index.php, and possibly download.php, in threesquared.net (aka Ben Speakman) Php download allows remote attackers to overwrite arbitrary local files via .. (dot dot) sequence in the file parameter.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.73% | 0.746 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 5 | 10 | 2.9 |
AV:N/AC:L/Au:N/C:N/I:P/A:N
|
http://secunia.com/advisories/21774
http://securityreason.com/securityalert/1528
http://www.securityfocus.com/archive/1/445269/100/0/threaded
http://www.securityfocus.com/bid/19872
http://www.vupen.com/english/advisories/2006/3479
https://exchange.xforce.ibmcloud.com/vulnerabilities/28751