CVE-2006-6175: High severity Horde Kronolith vulnerability
Directory traversal vulnerability in lib/FBView.php in Horde Kronolith H3 before 2.0.7 and 2.1.x before 2.1.4 allows remote attackers to include arbitrary files and execute PHP code via a .. (dot dot) sequence in the view parameter.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2006-6175?
CVE-2006-6175 is considered a high severity vulnerability due to its potential to allow remote file inclusion and execution of PHP code.
How do I fix CVE-2006-6175?
To fix CVE-2006-6175, upgrade Horde Kronolith to version 2.0.7 or 2.1.4 or later, which include patches for this vulnerability.
What versions of Horde Kronolith are affected by CVE-2006-6175?
CVE-2006-6175 affects Horde Kronolith versions 2.0.1 through 2.0.6 and 2.1.0 through 2.1.3.
What type of vulnerability is CVE-2006-6175?
CVE-2006-6175 is a directory traversal vulnerability that allows attackers to include arbitrary files on the server.
Can CVE-2006-6175 be exploited remotely?
Yes, CVE-2006-6175 can be exploited remotely if an attacker uses malicious input in the view parameter.