CVE-2006-7063

Directory traversal vulnerability in profile.php in TinyPHPforum 3.6 and earlier allows remote attackers to include and execute arbitrary files via ".." sequences in the uname parameter.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2007-02-24

Last modified

2024-08-07

Affected products

• Tinyphpforum (Tinyphpforum)

References

• http://www.securityfocus.com/bid/18304
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26881
• https://www.exploit-db.com/exploits/1857