CVE-2006-4878

Directory traversal vulnerability in footer.php in David Bennett PHP-Post (PHPp) 1.0 and earlier allows remote attackers to read and include arbitrary local…

published September 19, 2006

CVSS
—
EPSS
6%
Percentile
93.4
In the wild
Unconfirmed
What it is

Directory traversal vulnerability in footer.php in David Bennett PHP-Post (PHPp) 1.0 and earlier allows remote attackers to read and include arbitrary local files via a .. (dot dot) sequence in the template parameter. NOTE: this was later reported to affect 1.0.1, and demonstrated for code execution by uploading and accessing an avatar file.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06103 · 93.4th percentile
Published
2006-09-19T21:00Z
EPSS history
Timeline
  • 19 SEP 21:00Z
    Directory traversal vulnerability in footer.php in David Bennett PHP-Post (PHPp) 1.0 and earlier allows remote attackers to read and include arbitrary local…
    cvelistv5