CVE-2006-5125

2006-10-0220:00:00

mitre

www.cve.org

6.2 Medium

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

74.6%

JSON

Directory traversal vulnerability in window.php, possibly used by home.php, in Joshua Muheim phpMyWebmin 1.0 allows remote attackers to obtain sensitive information via a directory name in the target parameter, which triggers a directory listing through the opendir function.

References

kernel-32.blogspot.com/2006/09/php-mywebmin-10-remote-file-include.html

secunia.com/advisories/22178

www.securityfocus.com/bid/20264

www.vupen.com/english/advisories/2006/3846

exchange.xforce.ibmcloud.com/vulnerabilities/29259

www.exploit-db.com/exploits/2451