CVE-2006-0899

Summary

Directory traversal vulnerability in index.php in 4Images 1.7.1 and earlier allows remote attackers to read and include arbitrary files via ".." (dot dot) sequences in the template parameter.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• http://secunia.com/advisories/19026
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24938
• https://www.exploit-db.com/exploits/1533
• http://securityreason.com/securityalert/518
• http://retrogod.altervista.org/4images_171_adv.html
• http://www.securityfocus.com/archive/1/426468/100/0/threaded
• http://www.osvdb.org/23529
• http://www.vupen.com/english/advisories/2006/0754
• http://www.securityfocus.com/bid/16855

References

• http://secunia.com/advisories/19026
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24938
• https://www.exploit-db.com/exploits/1533
• http://securityreason.com/securityalert/518
• http://retrogod.altervista.org/4images_171_adv.html
• http://www.securityfocus.com/archive/1/426468/100/0/threaded
• http://www.osvdb.org/23529
• http://www.vupen.com/english/advisories/2006/0754
• http://www.securityfocus.com/bid/16855

• ←Previous
• Next→