CVE-2006-0707 | BDVDB-2026-15176 Detail

Description#

PyBlosxom before 1.3.2, when running on certain webservers, allows remote attackers to read arbitrary files via an HTTP request with multiple leading / (slash) characters, which is accessed using the PATH_INFO variable.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/16641
https://exchange.xforce.ibmcloud.com/vulnerabilities/24730
http://www.vupen.com/english/advisories/2006/0571
http://sourceforge.net/project/shownotes.php?release_id=391800
http://secunia.com/advisories/18858

Exploit#

No public exploit known

History#

Version 12006-02-15Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.