CVE-2006-6138 - Directory traversal vulnerability in download.php in Sisfo Kampus 0.8 allows remote attackers to list arbitrary directories via an absolute pathname in the dir parameter

Back Back to CVE browser

MEDIUM

Directory traversal vulnerability in download.php in Sisfo Kampus 0.8 allows remote attackers to list arbitrary directories via an absolute pathname in the dir parameter

Published Nov 28, 2006

5.0

MEDIUM

CVSS 2.0

EPSS 2.78%

Description

Directory traversal vulnerability in download.php in Sisfo Kampus 0.8 allows remote attackers to list arbitrary directories via an absolute pathname in the dir parameter.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (2)

http://www.securityfocus.com/bid/21294
vdb-entryx_refsource_BIDExploit
https://www.exploit-db.com/exploits/2847
exploitx_refsource_EXPLOIT-DB

Link	Providers	Tags
http://www.securityfocus.com/bid/21294		vdb-entryx_refsource_BIDExploit
https://www.exploit-db.com/exploits/2847		exploitx_refsource_EXPLOIT-DB

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Nov 28, 2006

Updated Aug 7, 2024

Reserved Nov 27, 2006

Link CVE-2006-6138

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2006-6138

Red Hat

Severity n/a

Public date n/a

Links CVE-2006-6138