|
|
CVE Reference: CVE-2006-4962 |
|
| NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE. | |
|
Original Page at CVE MITRE: CVE-2006-4962 |
|
|
Description: Directory traversal vulnerability in pbd_engine.php in Php Blue Dragon 2.9.1 and earlier allows remote attackers to read and execute arbitrary local files via a .. (dot dot) sequence via the phpExt parameter, as demonstrated by executing PHP code in a log file. |
|
|
CVE Status: Candidate |
|
|
References: XF http://xforce.iss.net/xforce/xfdb/29067 SAID Secunia Advisory: SA22031 MILW0RM http://www.milw0rm.com/exploits/4277 http://milw0rm.com/exploits/2402 BID 25264 20123 |
|
| Return to the previous page. |
