CVE-2006-4651

Directory traversal vulnerability in download/index.php, and possibly download.php, in threesquared.net aka Ben Speakman Php download allows remote attackers to overwrite arbitrary local files via .. dot dot sequence in the file parameter...

CVE-2006-4651

The CVE-2006-4651 issue concerns a directory traversal vulnerability in threesquared.net’s PHP download functionality (download/index.php and possibly download.php). The root cause is improper handling of the file parameter, allowing an attacker to use .. sequences to overwrite arbitrary local fi...