CVE-2006-6465

** DISPUTED **

Directory traversal vulnerability in WBmap.php in WikyBlog 1.3.2 and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the l parameter. NOTE: CVE disputes this vulnerability because l is validated by ctype_alpha before use.

Date published : 2006-12-11

https://www.exploit-db.com/exploits/2875

http://www.vupen.com/english/advisories/2006/4823