CVE-2006-3836

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.5% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2006-07-25 · updated 2026-06-16

Description

Directory traversal vulnerability in index.php in UNIDOmedia Chameleon LE 1.203 and earlier, and possibly Chameleon PRO, allows remote attackers to read arbitrary files via the rmid parameter.

Affected products

Unidomedia Chameleon Le: through 1.203

References

http://secunia.com/advisories/21156
http://securityreason.com/securityalert/1280
http://www.securityfocus.com/archive/1/440765/100/0/threaded
http://www.securityfocus.com/bid/19107
http://www.vupen.com/english/advisories/2006/2948
https://exchange.xforce.ibmcloud.com/vulnerabilities/27898
http://secunia.com/advisories/21156
http://securityreason.com/securityalert/1280
http://www.securityfocus.com/archive/1/440765/100/0/threaded
http://www.securityfocus.com/bid/19107
http://www.vupen.com/english/advisories/2006/2948
https://exchange.xforce.ibmcloud.com/vulnerabilities/27898

Get alerted when CVE-2006-3836 or the next vulnerability affects your stack