Unscored CVE-2006-3182 EUVD-2006-3179GHSA-wx6p-pjx3-8pqx

Directory traversal vulnerability in index.php in MobeScripts Mobile Space Community 2.0 allows remote attackers to read arbitrary files vi…

Published Jun 23, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

Directory traversal vulnerability in index.php in MobeScripts Mobile Space Community 2.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the uid parameter in the rss page.

References

20060609 MobeSpace v2.0 - XSS mailing-list
mobespace-index-directory-traversal(27519) vdb-entry
ADV-2006-2312 vdb-entry
1128 third-party-advisory
26421 vdb-entry
20611 third-party-advisory