Security Advisory

CVE-2006-1235

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2006-03-14 23:00:00

Last updated 2024-08-07 17:03:28

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

Directory traversal vulnerability in admin/deleteuser.php in HitHost 1.0.0 might allow remote attackers to delete directories (possibly only empty directories) via the $deleteuser variable. NOTE: the initial disclosure for this issue indicated that the researcher was unable to prove this issue; however, this might have been due to certain behaviors of rmdir.

← Browse all CVEs View on cve.org ↗