CVE-2006-5125

EPSS 3.6%

Directory traversal vulnerability in window.php, possibly used by home.php, in Joshua Muheim phpMyWebmin 1.0 allows remote attackers to obtain sensitive information via a directory name in the target parameter, which triggers a directory listing through the opendir function.

Affected products

n/a · n/a

public PoCs found — 2

exploitdbwww.exploit-db.com/exploits/2462unverified cve_referencewww.exploit-db.com/exploits/2451unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://kernel-32.blogspot.com/2006/09/php-mywebmin-10-remote-file-include.html http://secunia.com/advisories/22178 https://exchange.xforce.ibmcloud.com/vulnerabilities/29259 https://www.exploit-db.com/exploits/2451 http://www.securityfocus.com/bid/20264 http://www.vupen.com/english/advisories/2006/3846