CVE-2006-4636

Directory traversal vulnerability in SZEWO PhpCommander 3.0 and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the Directory parameter, as demonstrated by parameter values naming Apache HTTP Server log files that apparently contai...

CVE-2006-4636

The CVE-2006-4636 entry concerns a directory traversal vulnerability in SZEWO PhpCommander 3.0 and earlier. An attacker can use the Directory parameter to include and execute arbitrary local files, demonstrated by values that target Apache log files containing PHP code. Affected product: SZEWO Ph...