CVE-2006-6910

Analysis of CVE-2006-6910 (Fersch Formbankserver 1.9) shows that formbankcgi.exe is vulnerable when PATH_INFO begins with Abfrage. The vulnerability allows remote attackers to cause a denial of service (daemon crash) by sending multiple requests containing many /../ sequences in the Name paramete...