VYPR
← All advisories
Unrated severityNVD Advisory· Published May 10, 2006· Updated Jun 16, 2026

CVE-2006-2280

CVE-2006-2280

Description

Directory traversal vulnerability in website.php in openEngine 1.8 Beta 2 and earlier allows remote attackers to list arbitrary directories and read arbitrary files via a .. (dot dot) in the template parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Openengine/Openengine3 versions
    cpe:2.3:a:openengine:openengine:1.7.1:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:openengine:openengine:1.7.1:*:*:*:*:*:*:*
    • cpe:2.3:a:openengine:openengine:1.8_beta2:*:*:*:*:*:*:*
    • (no CPE)range: <=1.8 Beta 2

Patches

Vulnerability mechanics

References

6

News mentions

0

No linked articles in our index yet.