CVE-2006-5031

Directory traversal vulnerability in app/webroot/js/vendors.php in Cake Software Foundation CakePHP before 1.1.8.3544 allows remote attackers to read arbitrary…

published September 27, 2006

CVSS
—
EPSS
8%
Percentile
94.5
In the wild
Unconfirmed
What it is

Directory traversal vulnerability in app/webroot/js/vendors.php in Cake Software Foundation CakePHP before 1.1.8.3544 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter, followed by a filename ending with "%00" and a .js filename.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.07534 · 94.5th percentile
Published
2006-09-27T23:00Z
EPSS history
Timeline
  • 27 SEP 23:00Z
    Directory traversal vulnerability in app/webroot/js/vendors.php in Cake Software Foundation CakePHP before 1.1.8.3544 allows remote attackers to read arbitrary…
    cvelistv5