CVE-2006-5149

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-10-05 · updated 2026-06-16
Weakness: CWE-22

Description

Multiple directory traversal vulnerabilities in OpenBiblio before 0.5.2 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in (1) the page parameter to shared/help.php or (2) the tab parameter to shared/header.php.

Affected products

Openbiblio: through 0.5.1; 0.1.0, 0.2.1, 0.3.0, 0.4.0, 0.5.0

References

http://secunia.com/advisories/22238
http://sourceforge.net/project/shownotes.php?release_id=451780
http://www.securityfocus.com/archive/1/485588/100/0/threaded
http://www.securityfocus.com/bid/20301
http://www.securityfocus.com/bid/27053
http://www.vupen.com/english/advisories/2006/3867
https://exchange.xforce.ibmcloud.com/vulnerabilities/29316
http://secunia.com/advisories/22238
http://sourceforge.net/project/shownotes.php?release_id=451780
http://www.securityfocus.com/archive/1/485588/100/0/threaded
http://www.securityfocus.com/bid/20301
http://www.securityfocus.com/bid/27053

Get alerted when CVE-2006-5149 or the next vulnerability affects your stack