high7.5Public exploit code
CVE-2006-7063
Directory traversal vulnerability in profile.php in TinyPHPforum 3.6 and earlier allows remote attackers to include and execute arbitrary files via ".." sequen…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- TinyPHP Forum 3.6 - 'profile.php' Remote Code Execution2006-06-01 · webapps · php · Verified
Impact
Directory traversal vulnerability in profile.php in TinyPHPforum 3.6 and earlier allows remote attackers to include and execute arbitrary files via ".." sequences in the uname parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tinyphpforum | Tinyphpforum | through 3.6 |