CVE-2006-1235

Directory traversal vulnerability in admin/deleteuser.php in HitHost 1.0.0 might allow remote attackers to delete directories (possibly only empty directories)…

published March 14, 2006

CVSS
—
EPSS
2%
Percentile
75.6
In the wild
Unconfirmed
What it is

Directory traversal vulnerability in admin/deleteuser.php in HitHost 1.0.0 might allow remote attackers to delete directories (possibly only empty directories) via the $deleteuser variable. NOTE: the initial disclosure for this issue indicated that the researcher was unable to prove this issue; however, this might have been due to certain behaviors of rmdir.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01598 · 75.6th percentile
Published
2006-03-14T23:00Z
EPSS history
Timeline
  • 14 MAR 23:00Z
    Directory traversal vulnerability in admin/deleteuser.php in HitHost 1.0.0 might allow remote attackers to delete directories (possibly only empty directories)…
    cvelistv5