CVE-2006-6514

The vulnerability CVE-2006-6514 affects Winamp Web Interface (Wawi) versions 7.5.13 and earlier. It arises from an insufficient comparison to determine whether a directory is located below the application's root directory, enabling remote authenticated users to access certain other directories if...

CVE-2006-6512

The CVE-2006-6512 issue affects Winamp Web Interface (Wawi) up to version 7.5.13 and earlier, specifically the Browse function at /browse. The vulnerability is a directory traversal flaw that lets remote authenticated users list arbitrary directories by supplying URL-encoded backslashes ("%2F") i...

CVE-2006-6513

The CVE-2006-6513 issue affects Winamp Web Interface (Wawi) prior to or equal to 7.5.13, where the CControl::Download handler (/dl) can be triggered by an authenticated remote user. A trailing "." in the file parameter enables downloading arbitrary file types from the root, due to a bug in IsWina...

CVE-2006-6539

CVE-2006-6539 affects Winamp Web Interface (Wawi) prior to or including 7.5.13. The vulnerability consists of multiple buffer overflows in the security.cpp FindBasicAuth function (related to the /browse URI) triggered by a long username or crafted packet, leading to remote denial of service and p...