Strix
26.1K

CVE-2006-2633

UnknownEPSS 1.25%

Last modified

CVE-2006-2633 is a vulnerability of currently unknown severity. Absolute path traversal vulnerability in the copy action in index.php in Andrew Godwin ByteHoard 2.1 and earlier allows remote authenticated users to create or overwrite files in other users' directories by specifying the absolute path of the directory in the infolder parameter and simultaneously specifying the filename in the filepath parameter.. EPSS estimates a 1.25% chance of exploitation in the next 30 days.

Description

Absolute path traversal vulnerability in the copy action in index.php in Andrew Godwin ByteHoard 2.1 and earlier allows remote authenticated users to create or overwrite files in other users' directories by specifying the absolute path of the directory in the infolder parameter and simultaneously specifying the filename in the filepath parameter.

Metrics

EPSS Probability
1.25%

65.6th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

VendorProductVersions
Andrew GodwinBytehoard2.0.0
Andrew GodwinBytehoard2.0.1
Andrew GodwinBytehoard2.0.2
Andrew GodwinBytehoard2.0.3
Andrew GodwinBytehoard2.0.4
Andrew GodwinBytehoard2.0.5
Andrew GodwinBytehoard2.0_beta1
Andrew GodwinBytehoard2.0_beta2
Andrew GodwinBytehoard2.1_alpha
Andrew GodwinBytehoard2.1_beta
Andrew GodwinBytehoard2.1_delta
Andrew GodwinBytehoard2.1_gamma

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2006-2633?
Absolute path traversal vulnerability in the copy action in index.php in Andrew Godwin ByteHoard 2.1 and earlier allows remote authenticated users to create or overwrite files in other users' directories by specifying the absolute path of the directory in the infolder parameter and simultaneously specifying the filename in the filepath parameter.
How severe is CVE-2006-2633?
Severity scoring for CVE-2006-2633 is pending analysis. The EPSS model estimates a 1.25% probability of exploitation in the next 30 days.
How do I fix CVE-2006-2633?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2006-2633?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST