Unrated severityNVD Advisory· Published Mar 6, 2007· Updated Apr 23, 2026

CVE-2006-7133

Description

Directory traversal vulnerability in upload/bin/download.php in Upload Tool for PHP 1.0 allows remote attackers to read arbitrary files via (1) ".." sequences or (2) absolute pathnames in the filename parameter.

Affected products

Php Upload Tool/PHP Upload Tool
cpe:2.3:a:php_upload_tool:php_upload_tool:1.0:*:*:*:*:*:*:*

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

www.craigheffner.com/security/exploits/upload_tool_php.txtnvdExploitURL Repurposed
secunia.com/advisories/22973nvd
www.securityfocus.com/bid/21150nvd
www.vupen.com/english/advisories/2006/4575nvd
exchange.xforce.ibmcloud.com/vulnerabilities/30322nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.003
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000