CVE-2006-2770

creationtimestamp| type| source ---|---|--- 2008-11-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6972...

CVE-2006-2770

Directory traversal in randompic.php (pppBLOG 0.3.8 and earlier) allows remote attackers to read arbitrary files via a .. sequence in the index of the file array (e.g., file[0]), when register_globals is enabled. This is the stated vulnerable condition and impact per CVE-2006-2770 across multiple...

CVE-2006-2770

Directory traversal vulnerability in randompic.php in pppBLOG 0.3.8 and earlier, when registerglobals is enabled, allows remote attackers to read arbitrary files via a .. dot dot sequence in an index of the "file" array parameter, as demonstrated by file0...