CVE-2006-4962

EPSS 3.3%

Directory traversal vulnerability in pbd_engine.php in Php Blue Dragon 2.9.1 and earlier allows remote attackers to read and execute arbitrary local files via a .. (dot dot) sequence via the phpExt parameter, as demonstrated by executing PHP code in a log file.

Affected products

n/a · n/a

public PoCs found — 2

cve_referencewww.exploit-db.com/exploits/2402unverified cve_referencewww.exploit-db.com/exploits/4277unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://secunia.com/advisories/22031 https://exchange.xforce.ibmcloud.com/vulnerabilities/29067 https://www.exploit-db.com/exploits/2402 https://www.exploit-db.com/exploits/4277 http://www.securityfocus.com/bid/20123 http://www.securityfocus.com/bid/25264 http://www.vupen.com/english/advisories/2006/3736