CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2006-2331

Multiple directory traversal vulnerabilities in PHP-Fusion 6.00.306 allow remote attackers to include and execute arbitrary local files via (1) a .. (dot dot) in the settings[locale] parameter in infusions/last_seen_users_panel/last_seen_users_panel.php, and (2) a .. (dot dot) in the localeset parameter in setup.php. NOTE: the vendor states that this issue might exist due to problems in third party local files.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.125

EPSS Ranking 93.7%

CVSS Severity

CVSS v2 Score 6.4

References

Products affected by CVE-2006-2331

Php Fusion » Php Fusion » Version: 6.00.105

cpe:2.3:a:php_fusion:php_fusion:6.00.105
Php Fusion » Php Fusion » Version: 6.00.106

cpe:2.3:a:php_fusion:php_fusion:6.00.106
Php Fusion » Php Fusion » Version: 6.00.107

cpe:2.3:a:php_fusion:php_fusion:6.00.107
Php Fusion » Php Fusion » Version: 6.00.109

cpe:2.3:a:php_fusion:php_fusion:6.00.109
Php Fusion » Php Fusion » Version: 6.00.110

cpe:2.3:a:php_fusion:php_fusion:6.00.110
Php Fusion » Php Fusion » Version: 6.00.204

cpe:2.3:a:php_fusion:php_fusion:6.00.204
Php Fusion » Php Fusion » Version: 6.00.206

cpe:2.3:a:php_fusion:php_fusion:6.00.206
Php Fusion » Php Fusion » Version: 6.00.3

cpe:2.3:a:php_fusion:php_fusion:6.00.3
Php Fusion » Php Fusion » Version: 6.00.303

cpe:2.3:a:php_fusion:php_fusion:6.00.303
Php Fusion » Php Fusion » Version: 6.00.304

cpe:2.3:a:php_fusion:php_fusion:6.00.304
Php Fusion » Php Fusion » Version: 6.00.306

cpe:2.3:a:php_fusion:php_fusion:6.00.306

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2006-2331

Products

Pricing

Contact Us