CVE-2006-5149

🗓️ 02 Oct 2006 23:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov👁 62 Views🌐 WEB

CVE-2006-5149: Directory traversal vulnerabilities in OpenBiblio before 0.5.

Reporter	Title	Published	Views	Family All 6
Tenable Nessus	OpenBiblio < 0.6.0 Multiple Vulnerabilities	28 Dec 200700:00	–	nessus
Tenable Nessus	OpenBiblio < 0.5.2 Multiple Scripts Local File Inclusion	3 Oct 200600:00	–	nessus
Cvelist	CVE-2006-5149	2 Oct 200623:00	–	cvelist
EUVD	EUVD-2006-5134	7 Oct 202500:30	–	euvd
NVD	CVE-2006-5149	5 Oct 200604:04	–	nvd
Rapid7 Vulnerability Database (full)	CVE-2006-5149: Improper Limitation of a Pathname to a Restricted Directory	2 Oct 200600:00	–	rapid7

NVD

Node

OR

openbiblio openbiblioRange≤0.5.1

openbiblio openbiblioMatch0.1.0

openbiblio openbiblioMatch0.2.1

openbiblio openbiblioMatch0.3.0

openbiblio openbiblioMatch0.4.0

openbiblio openbiblioMatch0.5.0

Source	Link
securityfocus	www.securityfocus.com/archive/1/485588/100/0/threaded
vupen	www.vupen.com/english/advisories/2006/3867
sourceforge	www.sourceforge.net/project/shownotes.php
secunia	www.secunia.com/advisories/22238
securityfocus	www.securityfocus.com/bid/27053
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/29316
securityfocus	www.securityfocus.com/bid/20301

Parameter	Position	Path	Description	CWE
page	query param	shared/help.php	Directory traversal via the page parameter in shared/help.php enabling local file inclusion/execution via ..	CWE-22
tab	query param	shared/header.php	Directory traversal via the tab parameter in shared/header.php enabling local file inclusion/execution via ..	CWE-22

16 Jun 2026 22:30Current

6.4Medium risk

Vulners AI Score6.4

CVSS 27.5

EPSS0.0196

cve-2006-5149 openbiblio directory traversal vulnerability nvd