high7.5Public exploit code
CVE-2006-6376
Multiple directory traversal vulnerabilities in fm.php in Simple File Manager (SFM) 0.24a allow remote attackers to use ".." sequences to (1) read arbitrary fi…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- simple file manager 0.24a - Multiple Vulnerabilities2006-12-02 · webapps · php · Verified
Impact
Multiple directory traversal vulnerabilities in fm.php in Simple File Manager (SFM) 0.24a allow remote attackers to use ".." sequences to (1) read arbitrary files via the filename parameter in a download action, (2) delete arbitrary files via the delete parameter, and (3) modify arbitrary files via the edit parameter, which can be leveraged to execute arbitrary code.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Onedotoh | Simple File Manager | Version 0.24a |