Vulnerabilities > CVE-2006-4878 - Input Validation vulnerability in PHP-Post

047910
CVSS 5.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
NONE
Availability impact
NONE
network
low complexity
david-bennett
exploit available
NVD
Published: 2006-09-19
Updated: 2018-10-17

Summary

Directory traversal vulnerability in footer.php in David Bennett PHP-Post (PHPp) 1.0 and earlier allows remote attackers to read and include arbitrary local files via a .. (dot dot) sequence in the template parameter. NOTE: this was later reported to affect 1.0.1, and demonstrated for code execution by uploading and accessing an avatar file.

Vulnerable Configurations

Part Description Count
Application
David_Bennett
1

Exploit-Db

idEDB-ID:2593

References