CVE-2006-0104

Directory traversal vulnerability in TinyPHPForum 3.6 and earlier allows remote attackers to create a new user account, create a new topic, or view the profile of a user account, as demonstrated via a .. (dot dot) in the uname parameter to profile.php.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:ralph_capper:tinyphpforum:3.5:*:*:*:*:*:*:*
cpe:2.3:a:ralph_capper:tinyphpforum:3.6:*:*:*:*:*:*:*
cpe:2.3:a:ralph_capper:tinyphpforum:3.46:*:*:*:*:*:*:*
cpe:2.3:a:ralph_capper:tinyphpforum:3.47:*:*:*:*:*:*:*
cpe:2.3:a:ralph_capper:tinyphpforum:3.48:*:*:*:*:*:*:*
cpe:2.3:a:ralph_capper:tinyphpforum:3.49:*:*:*:*:*:*:*
cpe:2.3:a:ralph_capper:tinyphpforum:3.499:*:*:*:*:*:*:*

History

No history.

Information

Published : 2006-01-06 11:03

Updated : 2024-02-04 16:52


NVD link : CVE-2006-0104

Mitre link : CVE-2006-0104

CVE.ORG link : CVE-2006-0104


JSON object : View

Products Affected

ralph_capper

  • tinyphpforum