CVE-2006-6465

EPSS 0.58%
Published 11.12.2006 18:28:00
Last modified 09.04.2025 00:30:58
Source cve@mitre.org
Teams watchlist Login
Open Login

Directory traversal vulnerability in WBmap.php in WikyBlog 1.3.2 and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the l parameter.  NOTE: CVE disputes this vulnerability because l is validated by ctype_alpha before use

Affected products Warnungen 0 Metrics 2 CWE 0 References 6

Data is provided by the National Vulnerability Database (NVD)

Wikyblog ≫ Wikyblog Version1.3.2

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.58%	0.679

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	6.5	8	6.4	AV:N/AC:L/Au:S/C:P/I:P/A:P

http://www.vupen.com/english/advisories/2006/4823

https://exchange.xforce.ibmcloud.com/vulnerabilities/30650

https://www.exploit-db.com/exploits/2875

https://nvd.nist.gov/vuln/detail/CVE-2006-6465

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2006-6465

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2006-6465

EUVD