← All advisories

Unrated severityNVD Advisory· Published Apr 15, 2015· Updated Jun 17, 2026

CVE-2015-0906

CVE-2015-0906

Description

Directory traversal vulnerability in Lhaplus before 1.70 allows remote attackers to write to arbitrary files via a crafted archive.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

7

Lhaplus/Lhaplus7 versions
cpe:2.3:a:lhaplus:lhaplus:*:*:*:*:*:*:*:*+ 6 more
- cpe:2.3:a:lhaplus:lhaplus:*:*:*:*:*:*:*:*range: <=1.59
- cpe:2.3:a:lhaplus:lhaplus:1.52:*:*:*:*:*:*:*
- cpe:2.3:a:lhaplus:lhaplus:1.53:*:*:*:*:*:*:*
- cpe:2.3:a:lhaplus:lhaplus:1.55:*:*:*:*:*:*:*
- cpe:2.3:a:lhaplus:lhaplus:1.56:*:*:*:*:*:*:*
- cpe:2.3:a:lhaplus:lhaplus:1.57:*:*:*:*:*:*:*
- (no CPE)range: <1.70

Patches

Vulnerability mechanics

References

4

jvn.jp/en/jp/JVN02527990/index.htmlnvdVendor Advisory
jvndb.jvn.jp/jvndb/JVNDB-2015-000050nvdVendor Advisory
jvn.jp/en/jp/JVN02527990/414318/index.htmlnvd
www7a.biglobe.ne.jp/~schezo/nvd

News mentions

0

No linked articles in our index yet.