CVE-2006-6694
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
21/12/2006
Last modified:
19/10/2017
Description
Directory traversal vulnerability in include/config.php in E-Uploader Pro 1.0 and earlier allows remote attackers to execute arbitrary PHP code via a .. (dot dot) in the language parameter, as demonstrated by uploading a .JPG file containing PHP code, then accessing the file via config.php.
Impact
Base Score 2.0
7.50
Severity 2.0
HIGH
Vulnerable products and versions
CPE | From | Up to |
---|---|---|
cpe:2.3:a:scriptsfrenzy.com:e-uploader_pro:1.0:*:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page