CVE-2006-6284 Directory traversal vulnerability in admin.php in Vikingboard 0.1.2 allows remote authenticated administrators to include arbitrary files via a .. (dot dot) sequence in the act parameter.
HighCVSS 9.0
EPSS 3.8%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Directory traversal vulnerability in admin.php in Vikingboard 0.1.2 allows remote authenticated administrators to include arbitrary files via a .. (dot dot) sequence in the act parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| vikingboard | = 0.1.2 | No fix listed |
References
- 23026 third-party-advisory
- 1966 third-party-advisory
- 30530 vdb-entry
- 20061118 Vikingboard (0.1.2) [ multiples vulnerability ] mailing-list
- 21196 vdb-entry
- vikingboard-admin-file-include(30389) vdb-entry