CVE-2006-6345

Directory traversal vulnerability in SAP Internet Graphics Service (IGS) 6.40 Patchlevel 16 and earlier, and 7.00 Patchlevel 6 and earlier, allows remote attackers to delete arbitrary files via directory traversal sequences in an HTTP request. NOTE: This information is based upon an initial disclosure. Details will be updated after the grace period has ended. This issue is different from CVE-2006-4133 and CVE-2006-4134.

• http://secunia.com/advisories/23262
• http://securityreason.com/securityalert/1986
• http://securitytracker.com/id?1017342
• http://www.cybsec.com/vuln/CYBSEC-Security_Pre-Advisory_SAP_IGS_Remote_Arbitrary_File_Removal.pdf
• http://www.securityfocus.com/archive/1/453561/100/0/threaded
• http://www.securityfocus.com/bid/21449
• http://www.vupen.com/english/advisories/2006/4863
• https://exchange.xforce.ibmcloud.com/vulnerabilities/30765
• http://secunia.com/advisories/23262
• http://securityreason.com/securityalert/1986
• http://securitytracker.com/id?1017342
• http://www.cybsec.com/vuln/CYBSEC-Security_Pre-Advisory_SAP_IGS_Remote_Arbitrary_File_Removal.pdf
• http://www.securityfocus.com/archive/1/453561/100/0/threaded
• http://www.securityfocus.com/bid/21449
• http://www.vupen.com/english/advisories/2006/4863
• https://exchange.xforce.ibmcloud.com/vulnerabilities/30765

Published

Dec 7, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-6339SQL injection vulnerability in sites/index.php in deV!L`z Cl…
• CVE-2006-6340keystone.exe in nVIDIA nView allows attackers to cause a den…
• CVE-2006-6341Multiple PHP remote file inclusion vulnerabilities in mg.app…
• CVE-2006-6342Multiple SQL injection vulnerabilities in KLF-DESIGN (aka Ki…
• CVE-2006-6343SQL injection vulnerability in polls.php in Neocrome Seditio…
• CVE-2006-6344Multiple unspecified vulnerabilities in Neocrome Seditio 1.1…
• CVE-2006-6346Unspecified vulnerability in SAP Internet Graphics Service (…
• CVE-2006-6347Unrestricted file upload vulnerability in TFT-Gallery allows…
• CVE-2006-6348Cross-site scripting (XSS) vulnerability in board.php in mow…
• CVE-2006-6349Multiple SQL injection vulnerabilities in PWP Technologies T…
• CVE-2006-6350listpics 5 stores sensitive data under the web root with ins…
• CVE-2006-6351KhaledMuratList stores sensitive data under the web root wit…