CVE-2006-6938 Directory traversal vulnerability in includes/common.php in NitroTech 0.0.3a, as distributed before 2006, allows remote attackers to include arbitrary files via ".." sequences in the root parameter.
MediumCVSS 5.0
EPSS 3.1%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Directory traversal vulnerability in includes/common.php in NitroTech 0.0.3a, as distributed before 2006, allows remote attackers to include arbitrary files via ".." sequences in the root parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| nitrotech | = 0.0.3a | No fix listed |
References
- 20810 vdb-entry
- nitrotech-common-file-include(29904) vdb-entry
- 2685 exploit