Directory Traversal Issue in Horde Kronolith by The Horde Project
CVE-2006-6175

Currently unrated

Key Information:

Vendor: Horde
Status: Kronolith
Vendor: CVE Published:; 30 November 2006

What is CVE-2006-6175?

The vulnerability found in Horde Kronolith allows remote attackers to perform directory traversal by manipulating the view parameter. This exploitation can lead to arbitrary file inclusion, enabling attackers to execute PHP code on the server. The affected versions are all releases prior to 2.0.7 and 2.1.x before 2.1.4, making it crucial for users to upgrade their installations to mitigate potential risks.

References

http://www.securityfocus.com/bid/21341

vdb-entryx_refsource_BID

http://securitytracker.com/id?1017316

vdb-entryx_refsource_SECTRACK

http://www.vupen.com/english/advisories/2006/4775

vdb-entryx_refsource_VUPEN

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Nov 30, 2006
Vulnerability Reserved
Nov 30, 2006

CVE-2006-6175 Data

JSON