CVE-2006-2633 | BDVDB-2026-17150 Detail
Description#
Absolute path traversal vulnerability in the copy action in index.php in Andrew Godwin ByteHoard 2.1 and earlier allows remote authenticated users to create or overwrite files in other users' directories by specifying the absolute path of the directory in the infolder parameter and simultaneously specifying the filename in the filepath parameter.
Impact#
No impact statement in the source data.
Weaknesses#
No weakness recorded in the source data.
References#
- http://www.vupen.com/english/advisories/2006/2033
- http://www.securityfocus.com/archive/1/435135/100/0/threaded
- http://sourceforge.net/forum/forum.php?forum_id=576219
- http://www.securityfocus.com/bid/18139
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26705
- http://secunia.com/advisories/20304
- http://securityreason.com/securityalert/968
- http://sourceforge.net/project/shownotes.php?release_id=420549&group_id=90199
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.