Unrated severityNVD Advisory· Published Nov 22, 2006· Updated Apr 23, 2026
CVE-2006-6047
CVE-2006-6047
Description
Directory traversal vulnerability in manager/index.php in Etomite 0.6.1.2 allows remote authenticated administrators to include and execute arbitrary local files via a .. (dot dot) in the f parameter, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file, which is then included by index.php.
Affected products
1Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
9- www.0xcafebabe.it/sploits/etm_0612_remote_com.plnvdExploit
- secunia.com/advisories/22885nvdVendor Advisory
- www.vupen.com/english/advisories/2006/4558nvdVendor Advisory
- www.etomite.org/forums/index.phpnvd
- www.securityfocus.com/archive/1/451838/100/0/threadednvd
- www.securityfocus.com/archive/1/451930/100/0/threadednvd
- www.securityfocus.com/bid/21135nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/30329nvd
- www.exploit-db.com/exploits/2790nvd
News mentions
0No linked articles in our index yet.