CVE-2006-5528 - Directory traversal vulnerability in mod.php in SchoolAlumni Portal 2.26 allows remote attackers to include and execute arbitrary local files via a .

Back Back to CVE browser

MEDIUM

Directory traversal vulnerability in mod.php in SchoolAlumni Portal 2.26 allows remote attackers to include and execute arbitrary local files via a .

Published Oct 26, 2006

5.0

MEDIUM

CVSS 2.0

EPSS 1.91%

Description

Directory traversal vulnerability in mod.php in SchoolAlumni Portal 2.26 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the mod parameter. NOTE: some of these details are obtained from third party information.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (3)

http://securitytracker.com/id?1017105
vdb-entryx_refsource_SECTRACKExploit
http://www.securityfocus.com/bid/20673
vdb-entryx_refsource_BID
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-5513
Advisory

Link	Providers	Tags
http://securitytracker.com/id?1017105		vdb-entryx_refsource_SECTRACKExploit
http://www.securityfocus.com/bid/20673		vdb-entryx_refsource_BID
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-5513		Advisory