CVE-2006-4004

Vbportal - Path Traversal

Title source: rule

Description

Directory traversal vulnerability in index.php in vbPortal 3.0.2 through 3.6.0 Beta 1, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the bbvbplang cookie, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file, which is then included by index.php.

Exploits (1)

exploitdb WORKING POC VERIFIED

by r00t · phpwebappsphp

https://www.exploit-db.com/exploits/2087

View Code ZIP pw:eip

References (6)

[Exploit, Vendor Advisory] http://secunia.com/advisories/21287

[Various Sources] http://www.phpportals.com/forums/showthread.php?t=17308

[Exploit] http://www.securityfocus.com/bid/19257

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/28077

[Exploit, Third Party Advisory] https://www.exploit-db.com/exploits/2087

[Third Party Advisory] http://www.vupen.com/english/advisories/2006/3102

Scores

EPSS 0.0985

EPSS Percentile 93.0%

Details

Status published

Products (5)

vbportal/vbportal 3.0.2

vbportal/vbportal 3.5.0_beta_2

vbportal/vbportal 3.5.0_beta_3

vbportal/vbportal 3.5.0_gold

vbportal/vbportal 3.6.0_beta_1

Published Aug 07, 2006

Tracked Since Feb 18, 2026