CVE-2006-0567 | BDVDB-2026-15004 Detail

Description#

Directory traversal vulnerability in Files Xaraya module before 0.5.1, when the Archive Directory field on the Modify Config page is blank, allows remote attackers to access files outside of the web root via ".." (dot dot) sequences.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://exchange.xforce.ibmcloud.com/vulnerabilities/24393
http://xaraya.curtisfarnham.com/articles/Files_0.5.1_-_Security_Fix_and_other_things
http://www.vupen.com/english/advisories/2006/0371

Exploit#

No public exploit known

History#

Version 12006-02-07Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.