CVEs-PoC/2006/CVE-2006-5125.md

CVE-2006-5125

Description

Directory traversal vulnerability in window.php, possibly used by home.php, in Joshua Muheim phpMyWebmin 1.0 allows remote attackers to obtain sensitive information via a directory name in the target parameter, which triggers a directory listing through the opendir function.

POC

Reference

• https://www.exploit-db.com/exploits/2451

Github

• https://github.com/ARPSyndicate/cve-scores