CVE-2006-6277

EPSS 3.3%

Directory traversal vulnerability in admin/FileServer.php in ContentServ 4.x allows remote attackers to read arbitrary files via a .. (dot dot) in the src parameter, a different vector than CVE-2005-3086.

Affected products

n/a · n/a

public PoCs found — 1

exploitdbwww.exploit-db.com/exploits/2878unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://secunia.com/advisories/23158 http://securityreason.com/securityalert/1989 https://exchange.xforce.ibmcloud.com/vulnerabilities/30648 http://www.securityfocus.com/archive/1/453130/100/0/threaded http://www.securityfocus.com/bid/21369 http://www.vupen.com/english/advisories/2006/4808