First published: Thu Aug 17 2006(Updated: )
Directory traversal vulnerability in autohtml.php in the AutoHTML module for PHP-Nuke allows local users to include arbitrary files via a .. (dot dot) in the name parameter for a modload operation.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Php-nuke Autohtml Module | =2.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2006-4190 is classified as a medium severity vulnerability due to its ability to allow local users to include arbitrary files.
To fix CVE-2006-4190, update the AutoHTML module in PHP-Nuke to a version that does not allow directory traversal exploitation.
CVE-2006-4190 affects users of PHP-Nuke using the AutoHTML module version 2.0.
CVE-2006-4190 exploits a directory traversal vulnerability in the autohtml.php file, allowing unauthorized file inclusion.
CVE-2006-4190 is considered a local vulnerability, as it requires local user access to exploit.