Directory traversal

2006-01-0611:03:00

PRIOn knowledge base

www.prio-n.com

7.2 High

AI Score

Confidence

Low

0.023 Low

EPSS

Percentile

89.6%

JSON

Directory traversal vulnerability in TinyPHPForum 3.6 and earlier allows remote attackers to create a new user account, create a new topic, or view the profile of a user account, as demonstrated via a … (dot dot) in the uname parameter to profile.php.

CPENameOperatorVersion
tinyphpforumeq3.46
tinyphpforumeq3.499
tinyphpforumeq3.47
tinyphpforumeq3.6
tinyphpforumeq3.5
tinyphpforumeq3.49
tinyphpforumeq3.48

Name	Operator	Version
tinyphpforum	eq	3.46
tinyphpforum	eq	3.499
tinyphpforum	eq	3.47
tinyphpforum	eq	3.6
tinyphpforum	eq	3.5
tinyphpforum	eq	3.49
tinyphpforum	eq	3.48

References

evuln.com/vulns/14/exploit.html

evuln.com/vulns/14/summary.html

secunia.com/advisories/18293

securityreason.com/securityalert/320

securitytracker.com/id?1015436

www.osvdb.org/22258

www.securityfocus.com/archive/1/420933/100/0/threaded

www.securityfocus.com/bid/16163

www.vupen.com/english/advisories/2006/0054