CVE-2006-4161 Directory traversal vulnerability in the avatar_gallery action in profile.php in XennoBB 2.1.0 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the category parameter.
MediumCVSS 5.0
EPSS 3.4%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Directory traversal vulnerability in the avatar_gallery action in profile.php in XennoBB 2.1.0 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the category parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| xennobb | <= 2.1.0 | No fix listed |
| xennobb | = 1.0 | No fix listed |
| xennobb | = 1.0.1 | No fix listed |
| xennobb | = 1.0.2 | No fix listed |
| xennobb | = 1.0.3 | No fix listed |
| xennobb | = 1.0.4 | No fix listed |
| xennobb | = 1.0.5 | No fix listed |
References
- 21483 third-party-advisory vendor-advisory
- 1395 third-party-advisory
- 20060809 XennoBB <= "avatar gallery" Directory Transversal mailing-list
- 19446 exploit vdb-entry
- www.surfionline.com exploit vendor-advisory
- xennobb-profile-directory-traversal(28337) vdb-entry