CVE-2006-6514

Winamp Web Interface Wawi 7.5.13 and earlier uses an insufficient comparison to determine whether a directory is located below the application's root directory, which allows remote authenticated users to access certain other directories if the name of the root directory is a substring of the name...

CVE-2006-6513

The CVE-2006-6513 issue affects Winamp Web Interface (Wawi) prior to or equal to 7.5.13, where the CControl::Download handler (/dl) can be triggered by an authenticated remote user. A trailing "." in the file parameter enables downloading arbitrary file types from the root, due to a bug in IsWina...

CVE-2006-6514

The vulnerability CVE-2006-6514 affects Winamp Web Interface (Wawi) versions 7.5.13 and earlier. It arises from an insufficient comparison to determine whether a directory is located below the application's root directory, enabling remote authenticated users to access certain other directories if...