Unrated severityNVD Advisory· Published Dec 31, 2006· Updated Apr 23, 2026
CVE-2006-4579
CVE-2006-4579
Description
Directory traversal vulnerability in users.php in The Address Book 1.04e allows remote attackers to include arbitrary files via a .. (dot dot) in the language parameter.
Affected products
1- cpe:2.3:a:the_address_book:the_address_book:1.04e:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
5- secunia.com/advisories/21694nvdExploitVendor Advisory
- secunia.com/secunia_research/2006-76/advisory/nvdExploitVendor Advisory
- osvdb.org/32562nvd
- www.securityfocus.com/bid/21870nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/31246nvd
News mentions
0No linked articles in our index yet.