Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
CakePHP Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) Vulnerability - CVE-2006-5031 - Vulnerability Database
CakePHP

CakePHP Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) Vulnerability - CVE-2006-5031

Medium
Reference: CVE-2006-5031
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2006-5031
Title: CakePHP Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) Vulnerability
Overview:

Directory traversal vulnerability in app/webroot/js/vendors.php in Cake Software Foundation CakePHP before 1.1.8.3544 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter followed by a filename ending with quot00quot and a .js filename.