CVE-2006-1480 | BDVDB-2026-15925 Detail

Description#

Directory traversal vulnerability in start.php in WebAlbum 2.02 allows remote attackers to include arbitrary files and execute commands by (1) injecting code into local log files via GET commands, then (2) accessing that log via a .. (dot dot) sequence and a trailing null (%00) byte in the skin2 COOKIE parameter.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.osvdb.org/24160
https://exchange.xforce.ibmcloud.com/vulnerabilities/25443
http://secunia.com/advisories/19400
http://www.securityfocus.com/bid/17228
http://www.vupen.com/english/advisories/2006/1108
https://www.exploit-db.com/exploits/1608

Exploit#

https://www.exploit-db.com/exploits/1608

History#

Version 12006-03-29Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.