Unrated severityNVD Advisory· Published Dec 31, 2006· Updated Jun 16, 2026
CVE-2006-4579
CVE-2006-4579
Description
Directory traversal vulnerability in users.php in The Address Book 1.04e allows remote attackers to include arbitrary files via a .. (dot dot) in the language parameter.
Affected products
2cpe:2.3:a:the_address_book:the_address_book:1.04e:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:the_address_book:the_address_book:1.04e:*:*:*:*:*:*:*
- (no CPE)range: = 1.04e
Patches
Vulnerability mechanics
References
5- secunia.com/advisories/21694nvdExploitVendor Advisory
- secunia.com/secunia_research/2006-76/advisory/nvdExploitVendor Advisory
- osvdb.org/32562nvd
- www.securityfocus.com/bid/21870nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/31246nvd
News mentions
0No linked articles in our index yet.