CVE-2006-0244

23Vexday Risk Score

Sem sinal de exploração. Ela tem prova de conceito pública.

ssvc Attendepss 3.1%

da publicação à arma0 dias

Publicada no NVD18 de jan.

1ª PoC16 de jan.

probabilidade de exploração

3.1%top 13% das CVEs

exploração observada

nãonenhuma fonte reporta

1 exploit(s) público(s)

Directory traversal vulnerability in workspaces.php in phpXplorer 0.9.33 allows remote attackers to include arbitrary files via a .. (dot dot) and trailing null byte (%00) in the sShare parameter. NOTE: a followup post claims that this is not a vulnerability since the functionality of phpXplorer supports the upload of PHP files, which would not cross privilege boundaries since the PHP functionality would support read access outside the web root

Produtos afetados

n/a · n/a

PoCs públicas encontradas — 1✓ VexDay Proof

exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/27097

⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.

Referências

http://secunia.com/advisories/18518 http://securityreason.com/securityalert/353 https://exchange.xforce.ibmcloud.com/vulnerabilities/39982 http://www.arrelnet.com/advisories/adv20060116.html http://www.securityfocus.com/archive/1/421997/100/0/threaded http://www.securityfocus.com/archive/1/422158/100/0/threaded http://www.securityfocus.com/bid/16263 http://www.vupen.com/english/advisories/2006/0232