Unrated severityNVD Advisory· Published Dec 14, 2006· Updated Jun 16, 2026
CVE-2006-6514
CVE-2006-6514
Description
Winamp Web Interface (Wawi) 7.5.13 and earlier uses an insufficient comparison to determine whether a directory is located below the application's root directory, which allows remote authenticated users to access certain other directories if the name of the root directory is a substring of the name of the target directory, as demonstrated by accessing C:\folder2 when the root directory is C:\folder.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2cpe:2.3:a:flippet.org:winamp_web_interface:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:flippet.org:winamp_web_interface:*:*:*:*:*:*:*:*range: <=7.5.13
- (no CPE)range: <=7.5.13
Patches
Vulnerability mechanics
References
9- secunia.com/advisories/23292nvdVendor Advisory
- aluigi.altervista.org/adv/wawix-adv.txtnvd
- lists.grok.org.uk/pipermail/full-disclosure/2006-December/051217.htmlnvd
- securityreason.com/securityalert/2032nvd
- securitytracker.com/idnvd
- www.securityfocus.com/archive/1/454059/100/0/threadednvd
- www.securityfocus.com/bid/21539nvd
- www.vupen.com/english/advisories/2006/4935nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/30830nvd
News mentions
0No linked articles in our index yet.