CVE-2006-0371

MEDIUM 5.0CVE-2006-0371 · Published 22/01/2006 · updated 16/06/2026

In short

CVE-2006-0371 is a MEDIUM (CVSS 5.0) vulnerability affecting rcblog (noah medling).
Chance of exploitation in the next 30 days (EPSS): 2.9%, higher than 86.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
rcblog noah_medling	`= 1.03`	No fix yet

Description

Directory traversal vulnerability in index.php in Noah Medling RCBlog 1.03 allows remote attackers to read arbitrary .txt files, possibly including one that stores the administrator's account name and password, via a .. (dot dot) in the post parameter.

References

evuln.com/vulns/42/summary.html · Exploit
secunia.com/advisories/18547 · Vendor Advisory
securitytracker.com/id
fluffington.com/index.php · URL Repurposed
osvdb.org/22680
securityfocus.com/archive/1/422499/100/0/threaded
securityfocus.com/archive/1/425392/100/0/threaded
securityfocus.com/archive/1/436784/30/4500/threaded
securityfocus.com/bid/16342 · Exploit
exchange.xforce.ibmcloud.com/vulnerabilities/24248
exchange.xforce.ibmcloud.com/vulnerabilities/27042

More vulnerabilities in rcblog

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free