Unscored CVE-2006-1813 EUVD-2006-1813GHSA-c5g7-36mf-44mq

Directory traversal vulnerability in index.php in phpWebFTP 3.2 and earlier allows remote attackers to read arbitrary files via a .. (dot d…

Published Apr 18, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

Directory traversal vulnerability in index.php in phpWebFTP 3.2 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the language parameter.

References

17557 vdb-entry
ADV-2006-1388 vdb-entry
19706 third-party-advisory
723 third-party-advisory
20060417 PhpWebFTP 3.2 Login Script mailing-list
phpwebftp-index-directory-traversal(25920) vdb-entry