CVE-2006-6725

Multiple directory traversal vulnerabilities in PHPBuilder 0.0.2 and earlier allow remote attackers to read arbitrary files via a .. (dot dot) in the filename parameter to (1) lib/htm2php.php and (2) sitetools/htm2php.php. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.

• CWE-22

• http://www.vupen.com/english/advisories/2006/5125
• http://www.vupen.com/english/advisories/2006/5125

Published

Dec 26, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-6719The ftp_syst function in ftp-basic.c in Free Software Founda…
• CVE-2006-6720PHP remote file inclusion vulnerability in admin/index_sitio…
• CVE-2006-6721Multiple cross-site scripting (XSS) vulnerabilities in shout…
• CVE-2006-6722Bandwebsite (aka Bandsite portal system) 1.5 allows remote a…
• CVE-2006-6723The Workstation service in Microsoft Windows 2000 SP4 and XP…
• CVE-2006-6724BolinTech Dream FTP Server 1.02 allows remote authenticated …
• CVE-2006-6726PHP remote file inclusion vulnerability in inertianews_main.…
• CVE-2006-6727PHP remote file inclusion vulnerability in inertianews_class…
• CVE-2006-6728Unspecified vulnerability in the info request mechanism in L…
• CVE-2006-6729Cross-site scripting (XSS) vulnerability in a-blog 1.51 and …
• CVE-2006-6730OpenBSD and NetBSD permit usermode code to kill the display …
• CVE-2006-6731Multiple buffer overflows in Sun Java Development Kit (JDK) …