CVE-2006-2406
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2006-2406
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Directory traversal vulnerability in bb_lib/abbc.css.php in Unclassified NewsBoard (UNB) 1.5.3-d and possibly earlier versions, when register_globals is enabled, allows remote attackers to include arbitrary files via .. (dot dot) sequences and a trailing null byte (%00) in the design_path parameter. NOTE: this is closely related, but a different vulnerability than the ABBC[Config][smileset] parameter.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Unclassified NewsBoard abbc.css.php 目录遍历漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Unclassified NewsBoard (UNB) 1.5.3-d及可能的早期版本的bb_lib/abbc.css.php 存在目录遍历漏洞。启用register_globals时，可以使远程攻击者借助design_path参数（该参数中包含..）序列和尾随的零字节(%00)，读取任意文件。注意:此漏洞与ABBC[Config][smileset]关系密切而有所不同。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2006-2406
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2006-2406
请登录查看更多情报信息。
- http://newsboard.unclassified.de/forum/post/6499x_refsource_CONFIRM
- https://nvd.nist.gov/vuln/detail/CVE-2006-2406
Same Patch Batch · n/a · 2006-05-16 · 31 CVEs total
| CVE-2006-2390 | OZJournals 注释功能 跨站脚本攻击(XSS) 漏洞 | |
| CVE-2006-2404 | RadScripts RadLance Popup.PHP 目录遍历漏洞 | |
| CVE-2006-2403 | FileZilla 未明缓冲区溢出漏洞 | |
| CVE-2006-2402 | Outgun servernet.cpp changeRegistration函数 缓冲区溢出 | |
| CVE-2006-2401 | Outgun leetnet函数 拒绝服务漏洞 | |
| CVE-2006-2400 | Outgun leetnet函数 拒绝服务漏洞 | |
| CVE-2006-2399 | Outgun servnet.cpp 堆栈缓冲区溢出漏洞 | |
| CVE-2006-2398 | GPhotos index.php 目录遍历漏洞 | |
| CVE-2006-2397 | Gphotos 多个跨站脚本攻击(XSS) 漏洞 | |
| CVE-2006-2396 | PHPODP browse参数 跨站脚本攻击漏洞 | |
| CVE-2006-2395 | PopSoft Digital PopPhoto Studio popp.config.loader.inc.php PHP远程文件包含漏洞 | |
| CVE-2006-2394 | PHP Live Helper Chat.PHP 跨站脚本攻击漏洞 | |
| CVE-2006-2393 | Empire client_cmd 函数 拒绝服务漏洞 | |
| CVE-2006-2392 | PHP Blue Dragon Platinum popup_finduser.php PHP远程文件包含漏洞 | |
| CVE-2006-2391 | EMC Dantz Retrospect 客户端 远程缓冲区溢出漏洞 | |
| CVE-2006-2405 | Unclassified NewsBoard abbc.conf.php 目录遍历漏洞 | |
| CVE-2006-2420 | Bugzilla RSS阅读器 跨站脚本(XSS) 攻击 | |
| CVE-2006-2419 | Directory Listing index.php 跨站脚本攻击(XSS)漏洞 | |
| CVE-2006-2418 | phpMyAdmin 未明跨站脚本攻击(XSS)漏洞 | |
| CVE-2006-2417 | phpMyAdmin 多个跨站脚本攻击漏洞 |
Showing top 20 of 31 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2006-2406
No comments yet