medium6.4Public exploit code
CVE-2006-3194
Directory traversal vulnerability in index.php in singapore 0.10.0 and earlier allows remote attackers to read arbitrary files via a ..
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Singapore 0.9.x/0.10 - Multiple Traversal Arbitrary File Access2006-06-19 · webapps · php · Verified
Impact
Directory traversal vulnerability in index.php in singapore 0.10.0 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) sequence and trailing null (%00) byte in the (1) gallery and (2) template parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Singapore | Singapore | Versions 0.9.1_beta, 0.9.2_beta, 0.9.3_beta, 0.9.4_beta, 0.9.5_beta, 0.9.6_beta |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/20724
- http://securityreason.com/securityalert/1135
- http://www.securityfocus.com/archive/1/437716/100/0/threaded
- http://www.securityfocus.com/bid/18518
- http://www.vupen.com/english/advisories/2006/2457
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27325
- http://secunia.com/advisories/20724
- http://securityreason.com/securityalert/1135
- http://www.securityfocus.com/archive/1/437716/100/0/threaded
- http://www.securityfocus.com/bid/18518
- http://www.vupen.com/english/advisories/2006/2457
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27325