CVE-2006-4636

SZEWO PhpCommander <3.0 - Path Traversal

Title source: llm

Description

Directory traversal vulnerability in SZEWO PhpCommander 3.0 and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the Directory parameter, as demonstrated by parameter values naming Apache HTTP Server log files that apparently contain PHP code.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Kacper · phpwebappsphp

https://www.exploit-db.com/exploits/2310

View Code ZIP pw:eip

References (4)

[Vendor Advisory] http://secunia.com/advisories/21753

[Exploit] http://www.securityfocus.com/bid/19867

[Exploit, Third Party Advisory] https://www.exploit-db.com/exploits/2310

[Third Party Advisory] http://www.vupen.com/english/advisories/2006/3472

Scores

EPSS 0.0669

EPSS Percentile 91.3%

Details

Status published

Products (1)

szewo/phpcommander < 3.0

Published Sep 08, 2006

Tracked Since Feb 18, 2026