CVE-2006-6384

Severity: high (CVSS 7.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-12-07 · updated 2026-06-16

Description

Absolute path traversal vulnerability in abitwhizzy.php before 20061204 allows remote attackers to read arbitrary files via an absolute pathname in the Filename text window (f parameter), a variant of CVE-2006-6084.

Affected products

John Goodman Abitwhizzy: all versions

References

http://www.unverse.net/abitwhizzy-forum/0611251408/
http://www.unverse.net/abitwhizzy-forum/0611251408/

Get alerted when CVE-2006-6384 or the next vulnerability affects your stack