VulnerabilityModified
CVE-2006-5125
Directory traversal vulnerability in window.php, possibly used by home.php, in Joshua Muheim phpMyWebmin 1.0 allows remote attackers to obtain sensitive information via a directory name in the target parameter, which triggers a directory listing through…
MEDIUM 5.0EPSS 3.66%
Does this matter?
Lower severity and a low EPSS score (3.66%). Track it; it rarely justifies an emergency change on its own.
Description
Directory traversal vulnerability in window.php, possibly used by home.php, in Joshua Muheim phpMyWebmin 1.0 allows remote attackers to obtain sensitive information via a directory name in the target parameter, which triggers a directory listing through the opendir function.
- CVSS 2.0
- 5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
- EPSS
- 3.66% probability · 89th percentile
- CISA KEV
- Not listed
- Affected
- joshua muheim/phpmywebmin
- Source
- cve@mitre.org
References
- http://kernel-32.blogspot.com/2006/09/php-mywebmin-10-remote-file-include.htmlExploit
- http://secunia.com/advisories/22178Vendor Advisory
- http://www.securityfocus.com/bid/20264Exploit
- http://www.vupen.com/english/advisories/2006/3846
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29259
- https://www.exploit-db.com/exploits/2451
- http://kernel-32.blogspot.com/2006/09/php-mywebmin-10-remote-file-include.htmlExploit
- http://secunia.com/advisories/22178Vendor Advisory
- http://www.securityfocus.com/bid/20264Exploit
- http://www.vupen.com/english/advisories/2006/3846
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29259
- https://www.exploit-db.com/exploits/2451
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.