CVE-2006-1480

EPSS 3.2%

Directory traversal vulnerability in start.php in WebAlbum 2.02 allows remote attackers to include arbitrary files and execute commands by (1) injecting code into local log files via GET commands, then (2) accessing that log via a .. (dot dot) sequence and a trailing null (%00) byte in the skin2 COOKIE parameter.

Affected products

n/a · n/a

public PoCs found — 1

cve_referencewww.exploit-db.com/exploits/1608unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://secunia.com/advisories/19400 https://exchange.xforce.ibmcloud.com/vulnerabilities/25443 https://www.exploit-db.com/exploits/1608 http://www.osvdb.org/24160 http://www.securityfocus.com/bid/17228 http://www.vupen.com/english/advisories/2006/1108