CVE-2006-1819: High severity phpwebsite phpwebsite vulnerability
Directory traversal vulnerability in the loadConfig function in index.php in phpWebSite 0.10.2 and earlier allows remote attackers to include arbitrary local files and execute arbitrary PHP code via the hubdir parameter, as demonstrated by including accesslog. NOTE: in some cases, arbitrary remote file inclusion could be performed under PHP 5 using an SMB share argument such as "\\systemname\sharename".
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2006-1819?
CVE-2006-1819 is classified as a high severity vulnerability due to its potential to allow remote code execution.
How do I fix CVE-2006-1819?
To fix CVE-2006-1819, upgrade phpWebSite to version 0.10.3 or later, which addresses the directory traversal vulnerability.
What is the impact of CVE-2006-1819?
The impact of CVE-2006-1819 includes the ability for attackers to include arbitrary local files and execute PHP code on the server.
Which versions are affected by CVE-2006-1819?
CVE-2006-1819 affects phpWebSite versions 0.10.2 and earlier.
Can CVE-2006-1819 be exploited remotely?
Yes, CVE-2006-1819 can be exploited remotely by attackers through the hub_dir parameter in index.php.