CVE-2006-5536

Directory traversal vulnerability in cgi-bin/webcm in D-Link DSL-G624T firmware 3.00B01T01.YA-C.20060616 allows remote attackers to read arbitrary files via a .. (dot dot) in the getpage parameter.

• http://secunia.com/advisories/22524Exploit, Vendor Advisory
• http://securityreason.com/securityalert/1781
• http://www.eazel.es/advisory005-D-Link-DSL-G624T-directoy-transversal-xss-cross-site-scripting-directory-listing-vulnerabilities.htmlExploit, Vendor Advisory
• http://www.securityfocus.com/archive/1/449486/100/0/threaded
• http://www.securityfocus.com/bid/20689Exploit
• http://www.vupen.com/english/advisories/2006/4191
• http://secunia.com/advisories/22524Exploit, Vendor Advisory
• http://securityreason.com/securityalert/1781
• http://www.eazel.es/advisory005-D-Link-DSL-G624T-directoy-transversal-xss-cross-site-scripting-directory-listing-vulnerabilities.htmlExploit, Vendor Advisory
• http://www.securityfocus.com/archive/1/449486/100/0/threaded
• http://www.securityfocus.com/bid/20689Exploit
• http://www.vupen.com/english/advisories/2006/4191

Published

Oct 26, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-5530Multiple cross-site scripting (XSS) vulnerabilities in Boesc…
• CVE-2006-5531PHP remote file inclusion vulnerability in embedded.php in A…
• CVE-2006-5532Cross-site scripting (XSS) vulnerability in rmgs/images.php …
• CVE-2006-5533Multiple PHP remote file inclusion vulnerabilities in AROUND…
• CVE-2006-5534Multiple cross-site scripting (XSS) vulnerabilities in index…
• CVE-2006-5535Multiple cross-site scripting (XSS) vulnerabilities in WebHo…
• CVE-2006-5537Multiple cross-site scripting (XSS) vulnerabilities in cgi-b…
• CVE-2006-5538D-Link DSL-G624T firmware 3.00B01T01.YA-C.20060616 allows re…
• CVE-2006-5539PHP remote file inclusion vulnerability in login/secure.php …
• CVE-2006-5540backend/parser/analyze.c in PostgreSQL 8.1.x before 8.1.5 al…
• CVE-2006-5541backend/parser/parse_coerce.c in PostgreSQL 7.4.1 through 7.…
• CVE-2006-5542backend/tcop/postgres.c in PostgreSQL 8.1.x before 8.1.5 all…