Vulnerabilities > CVE-2006-0104 - Directory Traversal vulnerability in TinyPHPForum

047910
CVSS 5.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
PARTIAL
Availability impact
NONE
network
low complexity
ralph-capper
NVD
Published: 2006-01-06
Updated: 2018-10-19

Summary

Directory traversal vulnerability in TinyPHPForum 3.6 and earlier allows remote attackers to create a new user account, create a new topic, or view the profile of a user account, as demonstrated via a .. (dot dot) in the uname parameter to profile.php.

Vulnerable Configurations

Part Description Count
Application
Ralph_Capper
7

References