Vulnerabilities > CVE-2006-6512 - Directory Traversal vulnerability in Winamp Web Interface

047910
CVSS 3.5 - LOW
Attack vector
NETWORK
Attack complexity
MEDIUM
Privileges required
SINGLE
Confidentiality impact
PARTIAL
Integrity impact
NONE
Availability impact
NONE
network
flippet-org
NVD
Published: 2006-12-14
Updated: 2018-10-17

Summary

Directory traversal vulnerability in the Browse function (/browse URI) in Winamp Web Interface (Wawi) 7.5.13 and earlier allows remote authenticated users to list arbitrary directories via URL encoded backslashes ("%2F") in the path parameter. The attacker needs the "Browse" privilege to exploit this bug.

Vulnerable Configurations

Part Description Count
Application
Flippet.Org
1

References