Security Advisory

CVE-2006-0244

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2006-01-18 02:00:00

Last updated 2024-08-07 16:25:34

Assigner mitre

State PUBLISHED

Description

Directory traversal vulnerability in workspaces.php in phpXplorer 0.9.33 allows remote attackers to include arbitrary files via a .. (dot dot) and trailing null byte (%00) in the sShare parameter. NOTE: a followup post claims that this is not a vulnerability since the functionality of phpXplorer supports the upload of PHP files, which would not cross privilege boundaries since the PHP functionality would support read access outside the web root

← Browse all CVEs View on cve.org ↗