Exploitation Summary
EIP tracks 1 public exploit for CVE-2006-3050. PoCs published by Aesthetico.
AI-analyzed exploit summary The provided text describes a directory traversal vulnerability in SixCMS, allowing attackers to read arbitrary files by manipulating the 'template' parameter in detail.php. The example URL demonstrates accessing /etc/passwd via path traversal sequences.
Description
Directory traversal vulnerability in detail.php in SixCMS 6.0, and other versions before 6.0.6patch2, allows remote attackers to read arbitrary files via a .. (dot dot) sequence and trailing null (%00) byte in the template parameter.
Exploits (1)
The provided text describes a directory traversal vulnerability in SixCMS, allowing attackers to read arbitrary files by manipulating the 'template' parameter in detail.php. The example URL demonstrates accessing /etc/passwd via path traversal sequences.