6.4
CVSSv2

CVE-2006-5510

Published: 25/10/2006 Updated: 19/10/2017
CVSS v2 Base Score: 6.4 | Impact Score: 4.9 | Exploitability Score: 10
VMScore: 645
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N

Vulnerability Summary

Directory traversal vulnerability in explorer_load_lang.php in PH Pexplorer 0.24 allows remote malicious users to include arbitrary local files via ".." sequences in the Language cookie, as demonstrated by uploading a .gif file that contains PHP code.

Vulnerable Product Search on Vulmon Subscribe to Product

bluevirus-design ph pexplorer

Exploits

#!/usr/bin/php -q -d short_open_tag=on <? print ' ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :+: +:+ +:+ +:+ +:+ +:+ +:+ +:+ +#+ +:+ +#++:++# +#+ +:+ +#+ +#+ +#+ +#+ +#+ +#+ +#+ +#+ +#+ #+# ...