CVE-2006-4550 Directory traversal vulnerability in CHXO Feedsplitter 2006-01-21 allows remote attackers to read arbitrary XML files via .. (dot dot) sequences in the format parameter with a leading ".", which bypas...
MediumCVSS 5.0
EPSS 1.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in CHXO Feedsplitter 2006-01-21 allows remote attackers to read arbitrary XML files via .. (dot dot) sequences in the format parameter with a leading ".", which bypasses a security check.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| chxo feedsplitter | = 2006-01-21 | No fix listed |
References
- 22000 third-party-advisory
- 20060830 feedsplitter considered harmful mailing-list
- 19779 vdb-entry