Security Advisory

CVE-2006-5149

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2006-10-02 23:00:00
Last updated 2024-08-07 19:41:04
Assigner mitre
State PUBLISHED

Description

Multiple directory traversal vulnerabilities in OpenBiblio before 0.5.2 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in (1) the page parameter to shared/help.php or (2) the tab parameter to shared/header.php.