PT-2006-6995 · Unknown · Abitwhizzy.Php

Published 2006-12-07 · Updated 2008-09-05 · CVE-2006-6384

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions abitwhizzy.php versions prior to 20061204

Description The issue allows remote attackers to read arbitrary files via an absolute pathname in the f parameter. This is related to an absolute path traversal vulnerability.

Recommendations For versions prior to 20061204, update to a version released after 20061204 to resolve the issue. As a temporary workaround, consider restricting access to the f parameter in the affected API endpoint until a patch is available.

Fix

Related Identifiers

CVE-2006-6384

Affected Products

Abitwhizzy.Php

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2006-6384 · Security Note
• http://unverse.net/abitwhizzy-forum/0611251408 · Note