CVE-2006-5031

Description

Directory traversal vulnerability in app/webroot/js/vendors.php in Cake Software Foundation CakePHP before 1.1.8.3544 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter, followed by a filename ending with "%00" and a .js filename.

Affected packages (2)

• Debian/cakephpfrom 0, < 1.1.13.4450-1
• Packagist/cakephp/cakephp>= 1.0.1.2708, < 1.1.8.3544

References (8)

• ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2006-5031
• ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2006-5031
• PATCHhttps://github.com/cakephp/cakephp
• WEBhttp://cakeforge.org/frs/shownotes.php?release_id=134
• WEBhttp://secunia.com/advisories/22040
• WEBhttps://exchange.xforce.ibmcloud.com/vulnerabilities/29115
• WEBhttp://www.gulftech.org/?node=research&article_id=00114-09212006
• WEBhttp://www.securityfocus.com/bid/20150