Directory Traversal Vulnerability in Zend Platform by Zend Technologies
CVE-2006-4432

Currently unrated

Key Information:

Vendor

Zend

Status
Zend Platform
Vendor
CVE Published:
29 August 2006
đź”” Create Zend Vulnerability Alert

What is CVE-2006-4432?

A directory traversal vulnerability in Zend Platform versions 2.2.1 and earlier allows remote attackers to exploit a flaw in the PHP session identifier (PHPSESSID). By crafting a malicious PHPSESSID using a '..' (dot dot) sequence, an attacker can overwrite arbitrary files on the server. This issue poses a significant risk, as it could potentially lead to direct static code injection, thereby compromising the integrity of the web application.

References

http://www.securityfocus.com/archive/1/444263/100/0/threaded
mailing-listx_refsource_BUGTRAQ
http://www.osvdb.org/28232
vdb-entryx_refsource_OSVDB
http://securityreason.com/securityalert/1466
third-party-advisoryx_refsource_SREASON

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.