Unscored CVE-2006-3406 EUVD-2006-3402GHSA-873f-f4x7-6j2m

Directory traversal vulnerability in qtofm.php in QTOFileManager 1.0 allows remote attackers to modify arbitrary files via a .. (dot dot) s…

Published Jul 7, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

Directory traversal vulnerability in qtofm.php in QTOFileManager 1.0 allows remote attackers to modify arbitrary files via a .. (dot dot) sequence in the edit parameter.

References

20060702 QTOFileManager 1.0 mailing-list
1199 third-party-advisory