Vulnerabilities > CVE-2006-3194 - Unspecified vulnerability in Singapore
Attack vector
UNKNOWN Attack complexity
UNKNOWN Privileges required
UNKNOWN Confidentiality impact
UNKNOWN Integrity impact
UNKNOWN Availability impact
UNKNOWN singapore
exploit available
Summary
Directory traversal vulnerability in index.php in singapore 0.10.0 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) sequence and trailing null (%00) byte in the (1) gallery and (2) template parameter.
Vulnerable Configurations
Exploit-Db
| description | singapore 0.9.x/0.10 Multiple Parameter Traversal Arbitrary File Access. CVE-2006-3194. Webapps exploit for php platform |
| id | EDB-ID:28066 |
| last seen | 2016-02-03 |
| modified | 2006-06-19 |
| published | 2006-06-19 |
| reporter | simo64 |
| source | https://www.exploit-db.com/download/28066/ |
| title | singapore 0.9.x/0.10 - Multiple Parameter Traversal Arbitrary File Access |
References
- http://secunia.com/advisories/20724
- http://secunia.com/advisories/20724
- http://securityreason.com/securityalert/1135
- http://securityreason.com/securityalert/1135
- http://www.securityfocus.com/archive/1/437716/100/0/threaded
- http://www.securityfocus.com/archive/1/437716/100/0/threaded
- http://www.securityfocus.com/bid/18518
- http://www.securityfocus.com/bid/18518
- http://www.vupen.com/english/advisories/2006/2457
- http://www.vupen.com/english/advisories/2006/2457
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27325
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27325