Security Advisory

CVE-2006-2770

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2006-06-02 10:00:00

Last updated 2024-08-07 17:58:52

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

Directory traversal vulnerability in randompic.php in pppBLOG 0.3.8 and earlier, when register_globals is enabled, allows remote attackers to read arbitrary files via a .. (dot dot) sequence in an index of the "file" array parameter, as demonstrated by file[0].

← Browse all CVEs View on cve.org ↗