CVE-2006-1762

Directory traversal vulnerability in index.php in blur6ex 0.3.452 allows remote attackers to include arbitrary files via the shard parameter

published April 13, 2006

CVSS
—
EPSS
2%
Percentile
80.1
In the wild
Unconfirmed
What it is

Directory traversal vulnerability in index.php in blur6ex 0.3.452 allows remote attackers to include arbitrary files via the shard parameter. NOTE: this issue can be exploited to produce resultant XSS when the parameter has XSS manipulations, and path disclosure with other invalid values.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01955 · 80.1th percentile
Published
2006-04-13T01:00Z
EPSS history
Timeline
  • 13 APR 01:00Z
    Directory traversal vulnerability in index.php in blur6ex 0.3.452 allows remote attackers to include arbitrary files via the shard parameter
    cvelistv5