CVE-2006-5115

Directory traversal vulnerability in kgcall.php in KGB 1.87 allows remote attackers to include and execute arbitrary local files via a .

published October 2, 2006

CVSS
—
EPSS
2%
Percentile
84.1
In the wild
Unconfirmed
What it is

Directory traversal vulnerability in kgcall.php in KGB 1.87 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the engine parameter, as demonstrated by uploading a file containing PHP code with an image/jpeg content type, and then referencing this file through the engine parameter.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02434 · 84.1th percentile
Published
2006-10-02T20:00Z
EPSS history
Timeline
  • 02 OCT 20:00Z
    Directory traversal vulnerability in kgcall.php in KGB 1.87 allows remote attackers to include and execute arbitrary local files via a .
    cvelistv5