CVE-2006-5034

Directory traversal vulnerability in Paul Smith Computer Services vCAP 1.9.0 Beta and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the URI.

• http://archives.neohapsis.com/archives/fulldisclosure/2006-09/0187.html
• http://secunia.com/advisories/21862Exploit, Vendor Advisory
• http://securitytracker.com/id?1016822Exploit
• http://www.morx.org/vcap.txtVendor Advisory
• http://www.osvdb.org/28808
• http://www.securityfocus.com/bid/19958
• http://www.vupen.com/english/advisories/2006/3569
• https://exchange.xforce.ibmcloud.com/vulnerabilities/28873
• http://archives.neohapsis.com/archives/fulldisclosure/2006-09/0187.html
• http://secunia.com/advisories/21862Exploit, Vendor Advisory
• http://securitytracker.com/id?1016822Exploit
• http://www.morx.org/vcap.txtVendor Advisory
• http://www.osvdb.org/28808
• http://www.securityfocus.com/bid/19958
• http://www.vupen.com/english/advisories/2006/3569
• https://exchange.xforce.ibmcloud.com/vulnerabilities/28873

Published

Sep 27, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-5028Directory traversal vulnerability in filemanager/filemanager…
• CVE-2006-5029SQL injection vulnerability in thread.php in WoltLab Burning…
• CVE-2006-5030SQL injection vulnerability in modules/messages/index.php in…
• CVE-2006-5031Directory traversal vulnerability in app/webroot/js/vendors.…
• CVE-2006-5032PHP remote file inclusion vulnerability in dix.php3 in PHPar…
• CVE-2006-5033Unspecified vulnerability in StoresAndCalendarsList.cgi in P…
• CVE-2006-5035Multiple cross-site scripting (XSS) vulnerabilities in Paul …
• CVE-2006-5036MySource Matrix 3.8 and earlier, and MySource 2.x, allow rem…
• CVE-2006-5037MySource Matrix after 3.8 allows remote attackers to use the…
• CVE-2006-5038The FiWin SS28S WiFi VoIP SIP/Skype Phone, firmware version …
• CVE-2006-5039Unspecified vulnerability in Events 1.3 beta module (com_eve…
• CVE-2006-5040Unspecified vulnerability in SEF404x (com_sef) for Joomla! h…