CVE-2006-2952

Directory traversal vulnerability in Net Portal Dynamic System (NPDS) 5.10 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) sequence and trailing null (%00) byte in the (1) Default_Theme parameter to header.php or (2) ModPath parameter to modules/cluster-paradise/cluster-E.php.

• http://secunia.com/advisories/20523Exploit, Vendor Advisory
• http://securityreason.com/securityalert/1076
• http://www.acid-root.new.fr/advisories/npds510.txtVendor Advisory
• http://www.osvdb.org/26290
• http://www.osvdb.org/26291
• http://www.securityfocus.com/archive/1/436442/100/0/threaded
• http://www.securityfocus.com/bid/18383
• http://www.vupen.com/english/advisories/2006/2233
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27121
• http://secunia.com/advisories/20523Exploit, Vendor Advisory
• http://securityreason.com/securityalert/1076
• http://www.acid-root.new.fr/advisories/npds510.txtVendor Advisory
• http://www.osvdb.org/26290
• http://www.osvdb.org/26291
• http://www.securityfocus.com/archive/1/436442/100/0/threaded
• http://www.securityfocus.com/bid/18383
• http://www.vupen.com/english/advisories/2006/2233
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27121

Published

Jun 12, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-2946Dmx Forum 2.1a stores _includes/bd.inc under the web root wi…
• CVE-2006-2947Dmx Forum 2.1a allows remote attackers to obtain username an…
• CVE-2006-2948A-CART 2.0 stores the acart2_0.mdb file under the web docume…
• CVE-2006-2949Cross-site scripting (XSS) vulnerability in private.php in M…
• CVE-2006-2950Net Portal Dynamic System (NPDS) 5.10 and earlier allows rem…
• CVE-2006-2951Multiple cross-site scripting (XSS) vulnerabilities in Net P…
• CVE-2006-2953Cross-site scripting (XSS) vulnerability in default.asp in O…
• CVE-2006-2954SQL injection vulnerability in files.asp in OfficeFlow 2.6 a…
• CVE-2006-2955Multiple cross-site scripting (XSS) vulnerabilities in KAPho…
• CVE-2006-2956Multiple cross-site scripting (XSS) vulnerabilities in i.Lis…
• CVE-2006-2957Cross-site scripting (XSS) vulnerability in i.List 1.5 beta …
• CVE-2006-2958Directory traversal vulnerability in FilZip 3.05 allows remo…