medium5.0Public exploit code
CVE-2006-6138
Directory traversal vulnerability in download.php in Sisfo Kampus 0.8 allows remote attackers to list arbitrary directories via an absolute pathname in the dir…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Sisfo Kampus 0.8 - Remote File Inclusion / Download2006-11-25 · webapps · php · Verified
Impact
Directory traversal vulnerability in download.php in Sisfo Kampus 0.8 allows remote attackers to list arbitrary directories via an absolute pathname in the dir parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sisfo Kampus | Sisfo Kampus | Version 0.8 |