CVE-2006-6376

no score yetEPSS 4.2%

onedotoh simple file manager: no CVSS score yet. EPSS 4.2% chance of exploitation in the next 30 days.

Multiple directory traversal vulnerabilities in fm.php in Simple File Manager (SFM) 0.24a allow remote attackers to use ".." sequences to (1) read arbitrary files via the filename parameter in a download action, (2) delete arbitrary files via the delete parameter, and (3) modify arbitrary files via the edit parameter, which can be leveraged to execute arbitrary code.

EPSS: 4.2% chance of exploitation in the next 30 days; higher than 90% of CVEs (scores of 2026-10-31)
Published: 2006-12-07
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

onedotoh:simple_file_manager

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/30687
https://www.exploit-db.com/exploits/2883
https://exchange.xforce.ibmcloud.com/vulnerabilities/30687
https://www.exploit-db.com/exploits/2883

Check your stack JSON