Unrated severityNVD Advisory· Published Oct 26, 2006· Updated Apr 23, 2026
CVE-2006-5554
CVE-2006-5554
Description
Directory traversal vulnerability in index.php in Imageview 5 allows remote attackers to read or execute arbitrary local files via a .. (dot dot) in the user_settings cookie, as demonstrated by using the MyFile parameter in albumview.php to upload a text/plain .gif file containing PHP code, which is executed by index.php.
Affected products
1Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
4- www.securityfocus.com/bid/20731nvdExploit
- secunia.com/advisories/22552nvdVendor Advisory
- www.vupen.com/english/advisories/2006/4188nvd
- www.exploit-db.com/exploits/2647nvd
News mentions
0No linked articles in our index yet.