Approved changes feed: RSS · Atom

cpe:2.3:a:kgb:kgb:1.87:*:*:*:*:*:*:*

part: a version: 1.87 update: *

VendorKgb (10a78a44-1d94-5314-aa98-4c4c351081e8)
ProductKgb (98139912-f7a6-5654-a4ac-b344b378c7ea)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2006-5115 vulnerable 2026-06-08 04:49:19.713767 Details available
Directory traversal vulnerability in kgcall.php in KGB 1.87 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the engine parameter, as demonstrated by uploading a file containing PHP code with an image/jpeg content type, and then referencing this file through the engine parameter.
Published: 2006-10-02T20:00:00.000Z
Updated: 2024-08-07T19:41:05.221Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.