CVE-2006-3392
MEDIUM 5.0EPSS 79.5%
Webmin before 1.290 and Usermin before 1.220 calls the simplify_path function before decoding HTML, which allows remote attackers to read arbitrary files, as demonstrated using "..%01" sequences, which bypass the removal of "../" sequences before bytes such as "%01" are removed from the filename. NOTE: This is a different issue than CVE-2006-3274.
- CVSS v2.0 NVD
- 5.0 MEDIUM
AV:N/AC:L/Au:N/C:P/I:N/A:N - EPSS
- 79.49% chance of exploitation in the next 30 days, 100th percentile
- Nuclei
- medium · CWE-22
- Published
- 2006-07-06
- Updated
- 2024-08-07
Proof-of-concept exploits (13)
- http://www.securityfocus.com/archive/1/440125/100/0/threaded
- http://www.securityfocus.com/archive/1/440466/100/0/threaded
- http://www.securityfocus.com/archive/1/439653/100/0/threaded
- 0xtz/CVE-2006-33921★ · 2020-06-30
- Adel-kaka-dz/CVE-2006-33920★ · 2021-11-03
- IvanGlinkin/CVE-2006-339214★ · 2023-03-09
- MrEmpy/CVE-2006-33923★ · 2024-12-07
- brosck/CVE-2006-33923★ · 2024-12-07
- g1vi/CVE-2006-33921★ · 2023-10-09
- gb21oc/ExploitWebmin0★ · 2023-01-04
- kernel-cyber/CVE-2006-33920★ · 2022-09-15
- windsormoreira/CVE-2006-33920★ · 2022-09-15
- Adel-hx0d/CVE-2006-33920★ · 2021-11-03
Nuclei templates (1)
Metasploit modules (1)
ExploitDB entries (2)
Security advisories
- http://secunia.com/advisories/20892
- http://secunia.com/advisories/21105
- http://secunia.com/advisories/21365
- http://secunia.com/advisories/22556
- http://www.vupen.com/english/advisories/2006/2612
- http://www.osvdb.org/26772
- http://www.kb.cert.org/vuls/id/999601
- http://www.mandriva.com/security/advisories?name=MDKSA-2006:125
- http://www.securityfocus.com/bid/18744