CVE-2006-2693
Directory traversal vulnerability in admin/admin_hacks_list.php in Nivisec Hacks List 1.20 and...
Directory traversal vulnerability in admin/admin_hacks_list.php in Nivisec Hacks List 1.20 and earlier for phpBB, when register_globals is enabled, allows remote attackers to read arbitrary files via a ".." in the phpEx parameter.
Exploit likelihood
What each source reports
NVD Score used
Directory traversal vulnerability in admin/admin_hacks_list.php in Nivisec Hacks List 1.20 and earlier for phpBB, when register_globals is enabled, allows remote attackers to read arbitrary files via a ".." in the phpEx parameter.
- Record
CVE-2006-2693- CVSS 2.0
- 7.1 High
AV:N/AC:M/Au:N/C:C/I:N/A:N - Updated
- 2026-11-02
CVE List No score
Directory traversal vulnerability in admin/admin_hacks_list.php in Nivisec Hacks List 1.20 and earlier for phpBB, when register_globals is enabled, allows remote attackers to read arbitrary files via a ".." in the phpEx parameter.
- Record
CVE-2006-2693- Updated
- 2026-11-02
EUVDEUVD-2006-2692 No score
Directory traversal vulnerability in admin/admin_hacks_list.php in Nivisec Hacks List 1.20 and earlier for phpBB, when register_globals is enabled, allows remote attackers to read arbitrary files via a ".." in the phpEx parameter.
- Record
EUVD-2006-2692- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-w6c3-9jrm-68c3 No score
Directory traversal vulnerability in admin/admin_hacks_list.php in Nivisec Hacks List 1.20 and...
Directory traversal vulnerability in admin/admin_hacks_list.php in Nivisec Hacks List 1.20 and earlier for phpBB, when register_globals is enabled, allows remote attackers to read arbitrary files via a ".." in the phpEx parameter.
- Record
GHSA-w6c3-9jrm-68c3- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-2693 is a high vulnerability (CVSS 7.1) in Nivisec Hacks List, published May 31, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.21%, the 82nd percentile. No source names a fixed version.
References
securityfocus.com/archive/1/435285/100/0/threaded
exchange.xforce.ibmcloud.com/vulnerabilities/26840
vupen.com/english/advisories/2006/2034
secunia.com/advisories/20359
nukedx.com?viewdoc=37
nivisec.com/article.php?l=vi&ar=15
nvd.nist.gov/vuln/detail/CVE-2006-2693
github.com/advisories/GHSA-w6c3-9jrm-68c3