CVE-2006-0132

Published: Jan 9, 2006Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Directory traversal vulnerability in webftp.php in SysCP WebFTP 1.2.6 and possibly earlier allows remote attackers to include and execute arbitrary local PHP scripts, and possibly read other types of files, via a .. (dot dot) and a trailing null in the webftp_language parameter.

Affected (1)

Products: Webftp: Webftp

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Webftp Webftp	Version 1.2.6

References (10)

http://secunia.com/advisories/18355

Source: cve@mitre.org

PatchVendor Advisory

http://www.securityfocus.com/archive/1/420973/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/16175

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/0090

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/24018

Source: cve@mitre.org

http://secunia.com/advisories/18355

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.securityfocus.com/archive/1/420973/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/16175

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2006/0090

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/24018

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.