CVE-2006-2693

2006-05-31T10:06:00
ID CVE-2006-2693
Type cve
Reporter cve@mitre.org
Modified 2018-10-18T16:41:00

Description

Directory traversal vulnerability in admin/admin_hacks_list.php in Nivisec Hacks List 1.20 and earlier for phpBB, when register_globals is enabled, allows remote attackers to read arbitrary files via a ".." in the phpEx parameter. Successful exploitation requires that "register_globals" is enabled.