CVE-2006-0371

D

irectory traversal vulnerability in index.php in Noah Medling RCBlog 1.03 allows remote attackers to read arbitrary .txt files, possibly including one that stores the administrator's account name and password, via a .. (dot dot) in the post parameter.

Configurations

Configuration 1 (hide)

cpe:2.3:a:noah_medling:rcblog:1.03:*:*:*:*:*:*:*

History

21 Nov 2024, 00:06

Type Values Removed Values Added
References () http://evuln.com/vulns/42/summary.html - Exploit, Vendor Advisory () http://evuln.com/vulns/42/summary.html - Exploit, Vendor Advisory
References () http://secunia.com/advisories/18547 - Vendor Advisory () http://secunia.com/advisories/18547 - Vendor Advisory
References () http://securitytracker.com/id?1015523 - () http://securitytracker.com/id?1015523 -
References () http://www.fluffington.com/index.php?page=rcblog - URL Repurposed () http://www.fluffington.com/index.php?page=rcblog - URL Repurposed
References () http://www.osvdb.org/22680 - () http://www.osvdb.org/22680 -
References () http://www.securityfocus.com/archive/1/422499/100/0/threaded - () http://www.securityfocus.com/archive/1/422499/100/0/threaded -
References () http://www.securityfocus.com/archive/1/425392/100/0/threaded - () http://www.securityfocus.com/archive/1/425392/100/0/threaded -
References () http://www.securityfocus.com/archive/1/436784/30/4500/threaded - () http://www.securityfocus.com/archive/1/436784/30/4500/threaded -
References () http://www.securityfocus.com/bid/16342 - Exploit () http://www.securityfocus.com/bid/16342 - Exploit
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/24248 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/24248 -
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/27042 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/27042 -

Information

Published : 2006-01-22 20:03

Updated : 2025-04-03 01:03


NVD link : CVE-2006-0371

Mitre link : CVE-2006-0371

CVE.ORG link : CVE-2006-0371


JSON object : View

Products Affected