CVE-2006-5149

OpenBiblio < 0.5.2 - Path Traversal via Page or Tab Parameter

Title source: llm
STIX 2.1

Description

Multiple directory traversal vulnerabilities in OpenBiblio before 0.5.2 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in (1) the page parameter to shared/help.php or (2) the tab parameter to shared/header.php.

References (7)

Core 7
Core References
Vendor Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2006/3867
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/485588/100/0/threaded
Patch, Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/22238
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/27053
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/29316
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/20301

Scores

EPSS 0.0197
EPSS Percentile 78.0%

Details

CWE
CWE-22
Status published
Products (6)
openbiblio/openbiblio 0.1.0
openbiblio/openbiblio 0.2.1
openbiblio/openbiblio 0.3.0
openbiblio/openbiblio 0.4.0
openbiblio/openbiblio 0.5.0
openbiblio/openbiblio < 0.5.1
Published Oct 05, 2006
Tracked Since Feb 18, 2026