CVE-2006-0567

Published: Feb 7, 2006Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Directory traversal vulnerability in Files Xaraya module before 0.5.1, when the Archive Directory field on the Modify Config page is blank, allows remote attackers to access files outside of the web root via ".." (dot dot) sequences.

Affected (2)

Products: Curtis Farnham: Files Xaraya Module

Curtis Farnham

1 product

Files Xaraya Module

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Curtis Farnham Files Xaraya Module	Version 0.3.0
Curtis Farnham Files Xaraya Module	Version 0.4.0

References (6)

http://www.vupen.com/english/advisories/2006/0371

Source: cve@mitre.org

http://xaraya.curtisfarnham.com/articles/Files_0.5.1_-_Security_Fix_and_other_things

Source: cve@mitre.org

Patch

https://exchange.xforce.ibmcloud.com/vulnerabilities/24393

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/0371

Source: af854a3a-2127-422b-91ae-364da2661108

http://xaraya.curtisfarnham.com/articles/Files_0.5.1_-_Security_Fix_and_other_things

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

https://exchange.xforce.ibmcloud.com/vulnerabilities/24393

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.