CVE-2006-4260

2006-08-2120:00:00

mitre

www.cve.org

AI Score

6.7

Confidence

Low

EPSS

0.007

Percentile

79.6%

JSON

Directory traversal vulnerability in index.php in Fotopholder 1.8 allows remote attackers to read arbitrary directories or files via a … (dot dot) in the path parameter.

References

archives.neohapsis.com/archives/bugtraq/2006-08/0316.html

securityreason.com/securityalert/1421

securitytracker.com/id?1016702

www.osvdb.org/28243

exchange.xforce.ibmcloud.com/vulnerabilities/28398

exchange.xforce.ibmcloud.com/vulnerabilities/28399