CVE-2006-0371

Directory traversal vulnerability in index.php in Noah Medling RCBlog 1.03 allows remote attackers to read arbitrary .txt files, possibly including one that stores the administrator's account name and password, via a .. (dot dot) in the post parameter.

CVSS v2.0

5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS

2.89% chance of exploitation in the next 30 days, 86th percentile

Published

2006-01-22

Updated

2024-08-07

Proof-of-concept exploits (2)

• http://evuln.com/vulns/42/summary.html
• http://www.securityfocus.com/archive/1/425392/100/0/threaded

References

• CVE Record
• NVD entry

Related

• CVE-2006-0370
• CVE-2006-0372
• CVE-2006-0366
• CVE-2006-0395
• CVE-2006-0361
• CVE-2006-0396