7.5high
CVE-2006-70631 exploit
Directory traversal vulnerability in profile.php in TinyPHPforum 3.6 and earlier allows remote attackers to include and execute arbitrary f…
Published 19 y ago · modified 4 mo ago · JSON
CVSS
7.5
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
2.4%
percentile 84%
Public exploits
1
Exploit-DB
Summary
Directory traversal vulnerability in profile.php in TinyPHPforum 3.6 and earlier allows remote attackers to include and execute arbitrary files via ".." sequences in the uname parameter.
Exploit prediction (EPSS)
2.40% probability of exploitation in the next 30 days, higher than 84% of all scored CVEs.
Exploits and detections
- EDB-1857 TinyPHP Forum 3.6 - 'profile.php' Remote Code Execution · webapps · 2006-06-01
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 2.0 | 7.5 | AV:N/AC:L/Au:N/C:P/I:P/A:P |
References
- securityfocus.com /bid/18304 · vdb-entry, x_refsource_BID, x_transferred
- exchange.xforce.ibmcloud.com /vulnerabilities/26881 · vdb-entry, x_refsource_XF, x_transferred
- exploit-db.com /exploits/1857 · exploit, x_refsource_EXPLOIT-DB, x_transferred
Sources
- CVE List: CVE-2006-7063
- NVD: CVE-2006-7063
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.