CVE-2006-3387

Directory traversal vulnerability in sources/post.php in Fusion News 1.0, when register_globals is enabled, allows remote attackers to include arbitrary files…

published July 6, 2006

CVSS
—
EPSS
2%
Percentile
80.4
In the wild
Unconfirmed
What it is

Directory traversal vulnerability in sources/post.php in Fusion News 1.0, when register_globals is enabled, allows remote attackers to include arbitrary files via a .. (dot dot) sequence in the fil_config parameter, which can be used to execute PHP code that has been injected into a log file.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01988 · 80.4th percentile
Published
2006-07-06T20:00Z
EPSS history
Timeline
  • 06 JUL 20:00Z
    Directory traversal vulnerability in sources/post.php in Fusion News 1.0, when register_globals is enabled, allows remote attackers to include arbitrary files…
    cvelistv5