Unscored CVE-2006-6175 EUVD-2006-6158GHSA-3ffm-vqmq-r4hx

Directory traversal vulnerability in lib/FBView.php in Horde Kronolith H3 before 2.0.7 and 2.1.x before 2.1.4 allows remote attackers to in…

Published Nov 30, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

Directory traversal vulnerability in lib/FBView.php in Horde Kronolith H3 before 2.0.7 and 2.1.x before 2.1.4 allows remote attackers to include arbitrary files and execute PHP code via a .. (dot dot) sequence in the view parameter.

References

21341 vdb-entry
1017316 vdb-entry
ADV-2006-4775 vdb-entry
[horde-announce] 20061129 [SECURITY] Kronolith H3 (2.0.7) (final) mailing-list
23145 third-party-advisory
20061129 Horde Kronolith Arbitrary Local File Inclusion Vulnerability third-party-advisory
[horde-announce] 20061129 [SECURITY] Kronolith H3 (2.1.4) (final) mailing-list
GLSA-200701-11 vendor-advisory
23780 third-party-advisory