CVE-2006-5510

2006-10-2522:00:00

mitre

www.cve.org

AI Score

6.7

Confidence

High

EPSS

0.018

Percentile

88.3%

JSON

Directory traversal vulnerability in explorer_load_lang.php in PH Pexplorer 0.24 allows remote attackers to include arbitrary local files via “…” sequences in the Language cookie, as demonstrated by uploading a .gif file that contains PHP code.

References

secunia.com/advisories/22504

www.osvdb.org/29899

www.rahim.webd.pl/exploity/Exploits/104.txt

www.securityfocus.com/bid/20665

www.vupen.com/english/advisories/2006/4128

exchange.xforce.ibmcloud.com/vulnerabilities/29714

www.exploit-db.com/exploits/2598