Lucene search
CVE-2006-4458
Directory traversal vulnerability in calendar/inc/class.holidaycalc.inc.php in phpGroupWare 0.9.16.010 and earlier allows remote attackers to include arbitrary local files via a .. (dot dot) sequence and trailing null (%00) byte in the GLOBALS[phpgw_info][user][preferences][common][country] parameter
Show more
| Reporter | Title | Published | Views | Family All 4 |
|---|---|---|---|---|
 | CVE-2006-4458 | 31 Aug 200610:00 | – | cvelist |
 | CVE-2006-4458 | 31 Aug 200610:04 | – | nvd |
 | CVE-2006-4458 | 31 Aug 200600:00 | – | ubuntucve |
 | phpGroupWare 0.9.16.010 - 'GLOBALS[]' Remote Code Execution | 29 Aug 200600:00 | – | exploitdb |
Node
| Source | Link |
|---|---|
| vupen | www.vupen.com/english/advisories/2006/3414 |
| exchange | www.exchange.xforce.ibmcloud.com/vulnerabilities/28627 |
| securityfocus | www.securityfocus.com/bid/19751 |
| exploit-db | www.exploit-db.com/exploits/2270 |
| secunia | www.secunia.com/advisories/21687 |
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo31 Aug 2006 10:04Current
6.6Medium risk
Vulners AI Score6.6
CVSS26.4
EPSS0.024