CVE-2006-7133

no score yetEPSS 2.9%

Directory traversal vulnerability in upload/bin/download.php in Upload Tool for PHP 1.0 allows remote attackers to read arbitrary files via (1) ".." sequences or (2) absolute pathnames in the filename parameter.

EPSS: 2.9% chance of exploitation in the next 30 days; higher than 86% of CVEs (scores of 2026-10-31)
Published: 2007-03-06
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

php_upload_tool:php_upload_tool

References

http://secunia.com/advisories/22973
http://www.craigheffner.com/security/exploits/upload_tool_php.txt
http://www.securityfocus.com/bid/21150
http://www.vupen.com/english/advisories/2006/4575
https://exchange.xforce.ibmcloud.com/vulnerabilities/30322

Check your stack JSON