← back
CVE-2006-4161

CVE-2006-4161

EPSS 3.4%
Directory traversal vulnerability in the avatar_gallery action in profile.php in XennoBB 2.1.0 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the category parameter.
Affected products
n/a · n/a
public PoCs found — 1
exploitdbwww.exploit-db.com/exploits/28364unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://secunia.com/advisories/21483http://securityreason.com/securityalert/1395https://exchange.xforce.ibmcloud.com/vulnerabilities/28337http://www.securityfocus.com/archive/1/442881/100/0/threadedhttp://www.securityfocus.com/bid/19446http://www.surfionline.com/security_advisories/20060810_xennobb_avatar_gallery_transversal.txt