Unscored CVE-2006-1762 EUVD-2006-1762GHSA-jqmx-q56m-xx75

Directory traversal vulnerability in index.php in blur6ex 0.3.452 allows remote attackers to include arbitrary files via the shard paramete…

Published Apr 13, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

Directory traversal vulnerability in index.php in blur6ex 0.3.452 allows remote attackers to include arbitrary files via the shard parameter. NOTE: this issue can be exploited to produce resultant XSS when the parameter has XSS manipulations, and path disclosure with other invalid values.

References

20060413 Re: Multiple vulnerabilities in Blur6ex mailing-list
20060412 Multiple vulnerabilities in Blur6ex (fwd) mailing-list
blur6ex-index-path-disclosure(25758) vdb-entry
17465 vdb-entry
20080502 blur6ex-0.3.462 LOCAL FILE INCLUSION Vulnerbility mailing-list
20060411 Multiple vulnerabilities in Blur6ex mailing-list