CVE-2006-1762
Directory traversal vulnerability in index.php in blur6ex 0.3.452 allows remote attackers to...
Directory traversal vulnerability in index.php in blur6ex 0.3.452 allows remote attackers to include arbitrary files via the shard parameter. NOTE: this issue can be exploited to produce resultant XSS when the parameter has XSS manipulations, and path disclosure with other invalid values.
Exploit likelihood
What each source reports
NVD Score used
Directory traversal vulnerability in index.php in blur6ex 0.3.452 allows remote attackers to include arbitrary files via the shard parameter. NOTE: this issue can be exploited to produce resultant XSS when the parameter has XSS manipulations, and path disclosure with other invalid values.
- Record
CVE-2006-1762- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Directory traversal vulnerability in index.php in blur6ex 0.3.452 allows remote attackers to include arbitrary files via the shard parameter. NOTE: this issue can be exploited to produce resultant XSS when the parameter has XSS manipulations, and path disclosure with other invalid values.
- Record
CVE-2006-1762- Updated
- 2026-11-02
EUVDEUVD-2006-1762 No score
Directory traversal vulnerability in index.php in blur6ex 0.3.452 allows remote attackers to include arbitrary files via the shard parameter. NOTE: this issue can be exploited to produce resultant XSS when the parameter has XSS manipulations, and path disclosure with other invalid values.
- Record
EUVD-2006-1762- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-jqmx-q56m-xx75 No score
Directory traversal vulnerability in index.php in blur6ex 0.3.452 allows remote attackers to...
Directory traversal vulnerability in index.php in blur6ex 0.3.452 allows remote attackers to include arbitrary files via the shard parameter. NOTE: this issue can be exploited to produce resultant XSS when the parameter has XSS manipulations, and path disclosure with other invalid values.
- Record
GHSA-jqmx-q56m-xx75- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-1762 is a high vulnerability (CVSS 7.5) in Blursoft Blur6ex, published April 13, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.96%, the 80th percentile. No source names a fixed version.
References
securityfocus.com/archive/1/430885/100/0/threaded
attrition.org/pipermail/vim/2006-April/000691.html
exchange.xforce.ibmcloud.com/vulnerabilities/25758
nvd.nist.gov/vuln/detail/CVE-2006-1762
github.com/advisories/GHSA-jqmx-q56m-xx75