CVE-2007-6233 Directory traversal vulnerability in index.php in FTP Admin 0.1.0 allows remote authenticated users to include and execute arbitrary local files via a .. (dot dot) in the page parameter. NOTE: in some...
MediumCVSS 4.9
EPSS 1.9%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Directory traversal vulnerability in index.php in FTP Admin 0.1.0 allows remote authenticated users to include and execute arbitrary local files via a .. (dot dot) in the page parameter. NOTE: in some environments, this can be leveraged for remote file inclusion by using a UNC share pathname or an ftp, ftps, or ssh2.sftp URL.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ftp admin | = 0.1.0 | No fix listed |
References
- 27875 third-party-advisory vendor-advisory
- ftp-admin-index-file-include(38779) vdb-entry
- 4681 exploit