NetSight
IP …
high7.5

CVE-2006-5149

Multiple directory traversal vulnerabilities in OpenBiblio before 0.5.2 allow remote attackers to include and execute arbitrary local files via a ..

Impact

Multiple directory traversal vulnerabilities in OpenBiblio before 0.5.2 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in (1) the page parameter to shared/help.php or (2) the tab parameter to shared/header.php.

Affected products

VendorProductAffected versions
OpenbiblioOpenbiblio
through 0.5.1
Versions 0.1.0, 0.2.1, 0.3.0, 0.4.0, 0.5.0

Weakness classification

CWE-22

References