GCVE - cpe:2.3:a:phpxplorer:phpxplorer:0.9.33:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:phpxplorer:phpxplorer:0.9.33:*:*:*:*:*:*:*

part: a version: 0.9.33 update: *

Notes

Imported from purl2cpe mapping

PURL	Source	Last updated
`pkg:sourceforge/phpxplorer`	purl2cpe	2026-06-01 10:11:59.815092

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2006-0244`	vulnerable	2026-06-08 04:48:53.193163	Details available Directory traversal vulnerability in workspaces.php in phpXplorer 0.9.33 allows remote attackers to include arbitrary files via a .. (dot dot) and trailing null byte (%00) in the sShare parameter. NOTE: a followup post claims that this is not a vulnerability since the functionality of phpXplorer supports the upload of PHP files, which would not cross privilege boundaries since the PHP functionality would support read access outside the web root Published: 2006-01-18T02:00:00.000Z Updated: 2024-08-07T16:25:34.125Z Open on db.gcve.eu Reference links http://www.securityfocus.com/archive/1/422158/100/0/threaded https://exchange.xforce.ibmcloud.com/vulnerabilities/39982 http://www.securityfocus.com/bid/16263 http://www.arrelnet.com/advisories/adv20060116.html http://www.vupen.com/english/advisories/2006/0232	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open this panel to browse, search, copy or download the JSON record.