CVE-2006-6254

administration/telecharger.php in Cahier de texte 2.0 allows remote attackers to obtain unparsed content (source code) of files via the chemin parameter, as demonstrated using directory traversal sequences to obtain the MySQL username and password from conn_cahier_de_texte.php. NOTE: it is not clear whether the scope of this issue extends above the web document root, and whether directory traversal is the primary vulnerability.

• http://acid-root.new.fr/poc/15061124.txtExploit
• http://secunia.com/advisories/23122Exploit, Vendor Advisory
• http://securityreason.com/securityalert/1961
• http://www.securityfocus.com/archive/1/452600/100/0/threaded
• http://www.securityfocus.com/bid/21283Exploit
• http://www.vupen.com/english/advisories/2006/4701
• http://acid-root.new.fr/poc/15061124.txtExploit
• http://secunia.com/advisories/23122Exploit, Vendor Advisory
• http://securityreason.com/securityalert/1961
• http://www.securityfocus.com/archive/1/452600/100/0/threaded
• http://www.securityfocus.com/bid/21283Exploit
• http://www.vupen.com/english/advisories/2006/4701

Published

Dec 4, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-6248index.php in GPhotos 1.5 allows remote attackers to obtain s…
• CVE-2006-6249Cross-site scripting (XSS) vulnerability in Chama Cargo 4.36…
• CVE-2006-6250Format string vulnerability in Songbird Media Player 0.2 and…
• CVE-2006-6251Stack-based buffer overflow in VUPlayer 2.44 and earlier all…
• CVE-2006-6252Microsoft Windows Live Messenger 8.0 and earlier, when gestu…
• CVE-2006-6253Cahier de texte 2.0 stores sensitive information under the w…
• CVE-2006-6255Direct static code injection vulnerability in util.php in th…
• CVE-2006-6256Cross-site scripting (XSS) vulnerability in the file manager…
• CVE-2006-6257The file manager in AlternC 0.9.5 and earlier, when warnings…
• CVE-2006-6258The phpmyadmin subsystem in AlternC 0.9.5 and earlier transm…
• CVE-2006-6259Multiple directory traversal vulnerabilities in (a) class/fu…
• CVE-2006-6260SQL injection vulnerability in login.asp in Redbinaria Siste…