CVE-2006-7133

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.9% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2007-03-06 · updated 2026-06-16

Description

Directory traversal vulnerability in upload/bin/download.php in Upload Tool for PHP 1.0 allows remote attackers to read arbitrary files via (1) ".." sequences or (2) absolute pathnames in the filename parameter.

Affected products

Php Upload Tool: 1.0

References

http://secunia.com/advisories/22973
http://www.craigheffner.com/security/exploits/upload_tool_php.txt
http://www.securityfocus.com/bid/21150
http://www.vupen.com/english/advisories/2006/4575
https://exchange.xforce.ibmcloud.com/vulnerabilities/30322
http://secunia.com/advisories/22973
http://www.craigheffner.com/security/exploits/upload_tool_php.txt
http://www.securityfocus.com/bid/21150
http://www.vupen.com/english/advisories/2006/4575
https://exchange.xforce.ibmcloud.com/vulnerabilities/30322

Get alerted when CVE-2006-7133 or the next vulnerability affects your stack