exploitDog

CVE-2006-1480

Опубликовано: 29 мар. 2006

Источник: nvd

CVSS2: 5.1

EPSS Низкий

Описание

Directory traversal vulnerability in start.php in WebAlbum 2.02 allows remote attackers to include arbitrary files and execute commands by (1) injecting code into local log files via GET commands, then (2) accessing that log via a .. (dot dot) sequence and a trailing null (%00) byte in the skin2 COOKIE parameter.

Ссылки

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:duda:webalbum:*:*:*:*:*:*:*:*

Версия до 2.02 (включая)

EPSS

Процентиль: 92%

0.07405

Низкий

5.1 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-frc3-6h9v-9jxc

github

почти 4 года назад

Directory traversal vulnerability in start.php in WebAlbum 2.02 allows remote attackers to include arbitrary files and execute commands by (1) injecting code into local log files via GET commands, then (2) accessing that log via a .. (dot dot) sequence and a trailing null (%00) byte in the skin2 COOKIE parameter.

EPSS

Процентиль: 92%

0.07405

Низкий

5.1 Medium

CVSS2

Дефекты

NVD-CWE-Other