What’s Vulnerable › Vulnerabilities

CVE-2006-6744

• Severity: low (CVSS 2.1 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2006-12-26 · updated 2026-06-16

Description

phpProfiles before 2.1.1 does not have an index.php or other index file in the (1) image_data, (2) graphics/comm, or (3) users read/write directories, which might allow remote attackers to list directory contents or have other unknown impacts.

Affected products

• Phpprofiles: 2.1.0

References

• http://sourceforge.net/project/shownotes.php?release_id=460858&group_id=176310
• http://sourceforge.net/project/shownotes.php?release_id=460858&group_id=176310

Get alerted when CVE-2006-6744 or the next vulnerability affects your stack