CVE-2006-0707

PyBlosxom before 1.3.2, when running on certain webservers, allows remote attackers to read arbitrary files via an HTTP request with multiple leading / (slash)…

published February 15, 2006

CVSS
—
EPSS
1%
Percentile
73.3
In the wild
Unconfirmed
What it is

PyBlosxom before 1.3.2, when running on certain webservers, allows remote attackers to read arbitrary files via an HTTP request with multiple leading / (slash) characters, which is accessed using the PATH_INFO variable.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01457 · 73.3th percentile
Published
2006-02-15T11:00Z
EPSS history
Timeline
  • 15 FEB 11:00Z
    PyBlosxom before 1.3.2, when running on certain webservers, allows remote attackers to read arbitrary files via an HTTP request with multiple leading / (slash)…
    cvelistv5