medium5.0Public exploit code
CVE-2006-5528
Directory traversal vulnerability in mod.php in SchoolAlumni Portal 2.26 allows remote attackers to include and execute arbitrary local files via a ..
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- SchoolAlumni Portal 2.26 - 'mod.php?mod' Traversal Local File Inclusion2006-10-23 · webapps · php · Verified
Impact
Directory traversal vulnerability in mod.php in SchoolAlumni Portal 2.26 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the mod parameter. NOTE: some of these details are obtained from third party information.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Schoolalumni Portal | Schoolalumni Portal | Version 2.26 |