CVE-2006-0445

Severity: medium (CVSS 4.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.2% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2006-01-26 · updated 2026-06-16

Description

index.php in Phpclanwebsite 1.23.1 allows remote authenticated users to obtain the installation path by specifying an invalid file name to the uploader page, as demonstrated by "\", which will display the full path of uploader.php. NOTE: this might be the result of a file inclusion vulnerability.

Affected products

Phpclanwebsite: 1.23.1

References

http://www.h4cky0u.org/advisories/HYSA-2006-002-phpclan.txt
http://www.osvdb.org/22721
http://www.securityfocus.com/archive/1/423145/100/0/threaded
http://www.securityfocus.com/bid/16391
http://www.h4cky0u.org/advisories/HYSA-2006-002-phpclan.txt
http://www.osvdb.org/22721
http://www.securityfocus.com/archive/1/423145/100/0/threaded
http://www.securityfocus.com/bid/16391

Get alerted when CVE-2006-0445 or the next vulnerability affects your stack