Vulnerabilities > CVE-2006-7080 - Input Validation vulnerability in EXV2

047910
CVSS 4.3 - MEDIUM
Attack vector
NETWORK
Attack complexity
MEDIUM
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
NONE
Availability impact
NONE
network
exv2
exploit available
NVD
Published: 2007-03-02
Updated: 2017-10-11

Summary

Directory traversal vulnerability in the avatar upload feature in exV2 2.0.4.3 and earlier allows remote attackers to delete arbitrary files via ".." sequences in the old_avatar parameter.

Vulnerable Configurations

Part Description Count
Application
Exv2
1

Exploit-Db

descriptionexV2. CVE-2006-7079,CVE-2006-7080. Webapps exploit for php platform
fileexploits/php/webapps/2415.php
idEDB-ID:2415
last seen2016-01-31
modified2006-09-22
platformphp
port
published2006-09-22
reporterrgod
sourcehttps://www.exploit-db.com/download/2415/
titleexV2 <= 2.0.4.3 - extract Remote Command Execution Exploit
typewebapps

References