CVE-2006-0445

no score yetEPSS 1.2%

index.php in Phpclanwebsite 1.23.1 allows remote authenticated users to obtain the installation path by specifying an invalid file name to the uploader page, as demonstrated by "\", which will display the full path of uploader.php. NOTE: this might be the result of a file inclusion vulnerability.

EPSS: 1.2% chance of exploitation in the next 30 days; higher than 68% of CVEs (scores of 2026-10-31)
Published: 2006-01-26
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

phpclanwebsite:phpclanwebsite

References

http://www.h4cky0u.org/advisories/HYSA-2006-002-phpclan.txt
http://www.osvdb.org/22721
http://www.securityfocus.com/archive/1/423145/100/0/threaded
http://www.securityfocus.com/bid/16391
http://www.h4cky0u.org/advisories/HYSA-2006-002-phpclan.txt

Check your stack JSON