CVE-2006-4490

published 2006-08-31

CVE-2006-4490: Multiple directory traversal vulnerabilities in Cybozu Office before 6.6 Build 1.3 and Share 360 before 2.5 Build 0.3 allow remote authenticated users to read…

Priority P4 23 medium 4 CVSS 2.0

AV N AC L Au S C P I N A N

EXPLOIT

Multiple directory traversal vulnerabilities in Cybozu Office before 6.6 Build 1.3 and Share 360 before 2.5 Build 0.3 allow remote authenticated users to read arbitrary files via a .. (dot dot) sequence via the id parameter in (1) scripts/cbag/ag.exe or (2) scripts/s360v2/s360.exe.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
cybozu	cybozu_office	<= 6.6_build_1.2	—
cybozu	share_360	<= 2.5_build_0.2	—

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.