CVE-2006-1746

phplist < 2.10.2 - Unauthenticated Path Traversal via GLOBALS Parameter Overwrite

Title source: llm
STIX 2.1

Description

Directory traversal vulnerability in PHPList 2.10.2 and earlier allows remote attackers to include arbitrary local files via the (1) GLOBALS[database_module] or (2) GLOBALS[language_module] parameters, which overwrite the underlying $GLOBALS variable.

References (9)

Core 9
Core References
Exploit vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/17429
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/25701
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://securitytracker.com/id?1015889
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/448411
Various Sources x_refsource_confirm
http://tincan.co.uk/?lid=851
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2006/1296
Patch mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/430597
Exploit mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/430475/30/30/threaded

Scores

EPSS 0.0238
EPSS Percentile 81.9%

Details

CWE
CWE-22
Status published
Products (13)
tincan/phplist 2.6
tincan/phplist 2.6.1
tincan/phplist 2.6.2
tincan/phplist 2.6.3
tincan/phplist 2.6.4
tincan/phplist 2.6.5
tincan/phplist 2.7.1
tincan/phplist 2.7.2
tincan/phplist 2.8.2
tincan/phplist 2.8.7
... and 3 more
Published Apr 12, 2006
Tracked Since Feb 18, 2026