Vulnerability in Wikyblog

CVE-2006-6465

Directory traversal vulnerability in WBmap.php in WikyBlog 1.3.2 and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the l parameter. NOTE: CVE disputes this vulnerability because l is validated by ctype_alpha before use

EPSS: 0.014 (69.9th percentile) — read the EPSS interpretation.

Affected products

  • Wikyblog — versions 1.3.2
  • N/a — versions n/a

References