CVE-2006-1480 json
Directory traversal vulnerability in start.php in WebAlbum 2.02 allows remote attackers to include arbitrary files and execute commands by…
published 2006-03-29 20 y ago modified 2026-06-16 4 mo ago also EUVD-2006-1484
- cvss
- 5.1
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 3.3%
- EPSS 3.3% chance of exploitation in 30 days, percentile 88%
- public exploits
- 1
- Exploit-DB
Summary
Directory traversal vulnerability in start.php in WebAlbum 2.02 allows remote attackers to include arbitrary files and execute commands by (1) injecting code into local log files via GET commands, then (2) accessing that log via a .. (dot dot) sequence and a trailing null (%00) byte in the skin2 COOKIE parameter.
Timeline
- First public exploit (EDB-1608)
- Published
Exploit prediction
3.28% chance of exploitation in the next 30 days, higher than 88% of all scored CVEs (FIRST EPSS, 2026-11-08).
Exploits and checks
- EDB-1608 WebAlbum 2.02pl - COOKIE[skin2] Remote Code Execution webapps, 2006-03-25
- secunia.com http://secunia.com/advisories/19400 referenced PoC, tagged "exploit" by a source, unverified
- securityfocus.com http://www.securityfocus.com/bid/17228 referenced PoC, tagged "exploit" by a source, unverified
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 5.1 | AV:N/AC:H/Au:N/C:P/I:P/A:P |
References
-
exploit-db.com
/exploits/1608
exploit
-
secunia.com
/advisories/19400
third-party-advisory, exploit, vendor-advisory
-
securityfocus.com
/bid/17228
vdb-entry, exploit
-
osvdb.org
/24160
vdb-entry
-
exchange.xforce.ibmcloud.com
/vulnerabilities/25443
vdb-entry
-
vupen.com
/english/advisories/2006/1108
vdb-entry
Sources
- CVE List CVE-2006-1480
- NVD CVE-2006-1480
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.