Vulnerabilities > CVE-2006-4651 - Unspecified vulnerability in Threesquared.Net PHP Download Script

047910
CVSS 0.0 - NONE
Attack vector
UNKNOWN
Attack complexity
UNKNOWN
Privileges required
UNKNOWN
Confidentiality impact
UNKNOWN
Integrity impact
UNKNOWN
Availability impact
UNKNOWN
threesquared-net
NVD
Published: 2006-09-09
Updated: 2024-11-21

Summary

Directory traversal vulnerability in download/index.php, and possibly download.php, in threesquared.net (aka Ben Speakman) Php download allows remote attackers to overwrite arbitrary local files via .. (dot dot) sequence in the file parameter.

Vulnerable Configurations

Part Description Count
Application
Threesquared.Net
1

References