Lucene search
MitreCVELIST:CVE-2006-1909HistoryApr 20, 2006 - 6:00 p.m.
CVE-2006-1909
2006-04-2018:00:00
mitre
www.cve.org
2
Directory traversal vulnerability in index.php in Coppermine 1.4.4 allows remote attackers to read arbitrary files via a .//./ (modified dot dot slash) in the file parameter, which causes a regular expression to collapse the sequences into standard “…/” sequences.
References
myimei.com/security/2006-04-14/copperminephotogallery144-plugininclusionsystemindexphp-remotefileinclusion-attack.html
secunia.com/advisories/19665
www.securityfocus.com/archive/1/431062
www.securityfocus.com/archive/1/431118/30/0/threaded
www.securityfocus.com/bid/17570
www.vupen.com/english/advisories/2006/1392
exchange.xforce.ibmcloud.com/vulnerabilities/25866
Related
prion
prion
Directory traversal
2006-04-20 18:06:00
nvd
nvd
CVE-2006-1909
2006-04-20 18:06:00
openvas
openvas
FreeBSD Ports: coppermine
2008-09-04 00:00:00
FreeBSD Ports: coppermine
2008-09-04 00:00:00
nessus
nessus
exploitdb
exploitdb
Coppermine 1.4.4 - 'index.php' Local File Inclusion
2006-04-17 00:00:00
freebsd
freebsd
coppermine -- "file" Local File Inclusion Vulnerability
2006-04-19 00:00:00
cve
cve
CVE-2006-1909
2006-04-20 18:06:00