CVE-2006-7117 | BDVDB-2026-22710 Detail

Description#

Multiple directory traversal vulnerabilities in Kubix 0.7 and earlier allow remote attackers to (1) include and execute arbitrary local files via ".." sequences in the theme cookie to index.php, which is not properly handled by includes/head.php; and (2) read arbitrary files via ".." sequences in the file parameter in an add_dl action to adm_index.php, as demonstrated by reading connect.php.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://exchange.xforce.ibmcloud.com/vulnerabilities/30570
https://www.exploit-db.com/exploits/2863
http://www.securityfocus.com/bid/21352
https://exchange.xforce.ibmcloud.com/vulnerabilities/30572

Exploit#

https://www.exploit-db.com/exploits/2863

History#

Version 12007-03-06Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.