CVE-2006-7063

Tinyphpforum < 3.6 - Path Traversal

Title source: rule

Description

Directory traversal vulnerability in profile.php in TinyPHPforum 3.6 and earlier allows remote attackers to include and execute arbitrary files via ".." sequences in the uname parameter.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Hessam-x · perlwebappsphp

https://www.exploit-db.com/exploits/1857

View Code ZIP pw:eip

References (3)

[Exploit] http://www.securityfocus.com/bid/18304

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/26881

[Exploit, Third Party Advisory] https://www.exploit-db.com/exploits/1857

Scores

EPSS 0.0624

EPSS Percentile 90.9%

Details

Status published

Products (1)

tinyphpforum/tinyphpforum < 3.6

Published Feb 24, 2007

Tracked Since Feb 18, 2026