VulnerabilityModified

CVE-2006-6465

Directory traversal vulnerability in WBmap.php in WikyBlog 1.3.2 and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the l parameter.

MEDIUM 6.5EPSS 1.47%

Does this matter?

Lower severity and a low EPSS score (1.47%). Track it; it rarely justifies an emergency change on its own.

Description

Directory traversal vulnerability in WBmap.php in WikyBlog 1.3.2 and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the l parameter. NOTE: CVE disputes this vulnerability because l is validated by ctype_alpha before use

CVSS 2.0: 6.5 MEDIUMAV:N/AC:L/Au:S/C:P/I:P/A:P
EPSS: 1.47% probability · 72th percentile
CISA KEV: Not listed
Affected: wikyblog/wikyblog
Source: cve@mitre.org

References

http://www.vupen.com/english/advisories/2006/4823
https://exchange.xforce.ibmcloud.com/vulnerabilities/30650
https://www.exploit-db.com/exploits/2875
http://www.vupen.com/english/advisories/2006/4823
https://exchange.xforce.ibmcloud.com/vulnerabilities/30650
https://www.exploit-db.com/exploits/2875

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.