Unscored severity · published Dec 8, 2006
CVE-2006-6392
Directory traversal vulnerability in index.php in plx Web Studio (aka plxWebDev) plx Pay 3.2 and earlier allows remote attackers to include and execute arbitrary local files, or…
–
CVSS
1.8%
EPSS
No
On KEV
Description
Directory traversal vulnerability in index.php in plx Web Studio (aka plxWebDev) plx Pay 3.2 and earlier allows remote attackers to include and execute arbitrary local files, or obtain user credentials and other sensitive information, via a .. (dot dot) in the read parameter. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.8% · higher than 78% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PP
Plx Pay · Plx Web Studio
through 3.2; 3.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-6392
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-6392
Patch
http://secunia.com/advisories/23190
Vendor Advisory
http://www.securityfocus.com/bid/21379
www.vupen.com
http://www.vupen.com/english/advisories/2006/4809
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/30619